- # adds every security option
- certbot certonly -n --hsts --staple-ocsp --uir --must-staple --email $email --staple-ocsp --no-self-upgrade --agree-tos --apache -d $h
+ # when generating an example config, add all relevant security options:
+ # --hsts --staple-ocsp --uir
+ certbot certonly -n --must-staple --email $email --no-self-upgrade \
+ --agree-tos --$t -d $h