Usage: ${0##*/} [OPTIONS] [EXTRA_SETTINGS_FILE] apache2|nginx DOMAIN
apache/nginx config & let's encrypt
-If using tls then it expects certbot to be installed and in PATH.
+If using tls then it expects certbot to be installed and in PATH. Also,
+certbot cronjob should be taken care of outside this script. In the
+debian package, it installs a systemd timer, which I (Ian Kelling) use
+and modify to email me on failure. You can see how I do this in my git
+repo distro-setup, and log-quiet.
EXTRA_SETTINGS_FILE can be - for stdin
# when generating an example config, add all relevant security options:
# --hsts --staple-ocsp --uir
certbot certonly -n --must-staple --email $email --no-self-upgrade \
- --agree-tos --$t -d $h
+ --agree-tos --${t%2} -d $h
rm $vhost_file
fi
fi