Letsencrypt

certbot on debian

• https://linuxize.com/post/secure-apache-with-let-s-encrypt-on-debian-10/

certbot certonly --agree-tos --email spam@tobias-weiss.org --webroot -w /var/lib/letsencrypt/ -d gitlab.tobias-weiss.org

certbot certonly --agree-tos --email spam@tobias-weiss.org --webroot -w /var/lib/letsencrypt/ -d mip.tobias-weiss.org

Finally adjust the /etc/cron.d/certbot file

0 */12 * * * root test -x /usr/bin/certbot -a \! -d /run/systemd/system && perl -e 'sleep int(rand(43200))' && certbot -q renew --renew-hook "systemctl reload apache2"