• Let's Encrypt ¹⁾
• Certbot ²⁾
• Realm of Espionage

• Windows 11 (24H2)
• nginx

• https://www.python.org/downloads/windows/
• Last tested: python-3.13.3-amd64.exe

• Install pip

"%LocalAppData%\Programs\Python\Python313\Scripts\pip.exe" install "certbot"

"%LocalAppData%\Programs\Python\Python313\Scripts\pip.exe" install --upgrade "certbot"

MKDIR "%SystemDrive%\www\certbot"

"notepad.exe" "%SystemDrive%\www\certbot\cli-custom.ini"

verbose = true
text = true
non-interactive = true
standalone = true
force-renewal = true
agree-tos = true

##########
#CHANGEME#
##########

email = espionage724@x

##########
#CHANGEME#
##########

no-eff-email = true

rsa-key-size = 4096
redirect = true
hsts = true
uir = true
staple-ocsp = false

domains = realmofespionage.xyz, blog.realmofespionage.xyz, files.realmofespionage.xyz, media.realmofespionage.xyz, wiki.realmofespionage.xyz

# End

"netsh.exe" advfirewall firewall add rule name="Certbot (Standalone)" dir="in" action="allow" program="%LocalAppData%\Programs\Python\Python313\python.exe" protocol="tcp" localport="80"

"%LocalAppData%\Programs\Python\Python313\Scripts\certbot.exe" "certonly" --config "%SystemDrive%\www\certbot\cli-custom.ini" --dry-run

"netsh.exe" advfirewall firewall delete rule name="Certbot (Standalone)"

• 2025/03/15: TODO: Certbot needs admin for symlinks; possibly needs different scripting ³⁾, and updated for temp firewall rule

MKDIR "%SystemDrive%\www\scripts\certbot"

explorer "%SystemDrive%\www\scripts\certbot"

notepad "%SystemDrive%\www\scripts\certbot\Renewal.bat"

:: Stop nginx
CALL "%SystemDrive%\www\scripts\nginx\Stop.bat"

:: Renew Certs
"%LocalAppData%\Programs\Python\Python313\Scripts\certbot.exe" "certonly" --config "%SystemDrive%\www\certbot\cli-custom.ini" --quiet

:: Start nginx
CALL "%SystemDrive%\www\scripts\nginx\Start.bat"

:: End

"%SystemDrive%\www\scripts\certbot\Renewal.bat"

"notepad.exe" "%SystemDrive%\www\scripts\certbot\Renewal-test.bat"

:: Stop nginx
CALL "%SystemDrive%\www\scripts\nginx\Stop.bat"

:: Renew Certs
"netsh.exe" advfirewall firewall add rule name="Certbot (Standalone)" dir="in" action="allow" program="%LocalAppData%\Programs\Python\Python313\python.exe" protocol="tcp" localport="80"
"%LocalAppData%\Programs\Python\Python313\Scripts\certbot.exe" "certonly" --config "%SystemDrive%\www\certbot\cli-custom.ini" --quiet
"netsh.exe" advfirewall firewall delete rule name="Certbot (Standalone)"

"explorer.exe" "%SystemDrive%\Certbot\archive\realmofespionage.xyz"

"explorer.exe" "%SystemDrive%\www\certbot\certs"

"notepad.exe" "%SystemDrive%\www\nginx\conf.d\ssl.conf"

:: End

"%SystemDrive%\www\scripts\certbot\Renewal-test.bat"

notepad "%SystemDrive%\www\scripts\certbot\Update.bat"

:: Update pip
"%LocalAppData%\Programs\Python\Python313\python.exe" -m "pip" install --upgrade "pip" --quiet

:: Update Certbot
"%LocalAppData%\Programs\Python\Python313\Scripts\pip.exe" install --upgrade "certbot" --quiet

:: End

"%SystemDrive%\www\scripts\certbot\Update.bat"

• Right-click Desktop → New → Shortcut

"%SystemDrive%\www\scripts\certbot\Renewal.bat"

Certbot Renewal