===== Certbot =====

==== Registration to Let's Encrypt ACME ====

<code>
# certbot register -n --agree-tos --no-eff-email -m "letsencrypt@initipi.sk"
 
- staging
 
# certbot register --staging -n --agree-tos --no-eff-email -m "letsencrypt@initipi.sk"
</code>

==== Generate SSL certificate ====

<code>
# certbot certonly -n -a webroot --webroot-path /opt/certbot/www -d domena.tld -d www.domena.tld
 
- staging
 
# certbot certonly --staging -n -a webroot --webroot-path /opt/certbot/www -d domena.tld -d www.domena.tld
</code>

==== Automatic renewing certificates ====

  * create ''/etc/cron.d/certbot-renew-certs'':

<code>
25 5,17 * * * root certbot renew -n >> /var/log/certbot.log 2>&1
</code>

==== Manual renewing certificates ====

<code>
# certbot certonly --force-renewal -a webroot --webroot-path /opt/certbot/www --cert-name www.domain.tld
</code>

==== Automatic restart web server ====

  * create ''/etc/letsencrypt/renewal-hooks/deploy/99_restart-httpd.sh''

<code>
if [ -n "$RENEWED_DOMAINS" ]; then
    nginx -t >/dev/null && /etc/init.d/nginx restart >/dev/null
fi
</code>

==== Revoke certificate ====

<code>
# certbot revoke --cert-path /etc/letsencrypt/live/domena.tld/cert.pem
 
- staging
 
# certbot revoke --staging --cert-path /etc/letsencrypt/live/domena.tld/cert.pem
</code>

==== Delete certificate ====

Delete all relevant certificates and keys

<code>
# certbot delete --cert-name domena.tld
</code>

==== Unregister from Let's Encrypt ACME====

<code>
# certbot unregister --account [ACCOUNT_ID]
</code>