{{tag>ssl letsencrypt}}

====== certbot installation ======

For older versions see [[wiki:certbot_installation|Install certbot via manual method]]

===== Debian 10 =====
<WRAP center round info 60%>
This will also install a systemd timer unit to automatically run the renewal procedure. See [[#systemd units installed]]
</WRAP>
Install it from repository:
  apt-get install certbot

If you are running apache you also need a plugin for it:

  apt install python-certbot-apache

You should now be able to just run <code>certbot</code> on CLI.

===== Debian 11 =====
Apache and nginx plugins have change names so:

  apt install python3-certbot-apache
or
  apt install python3-certbot-nginx
===== systemd units installed =====
<code systemd>
# /lib/systemd/system/certbot.service
[Unit]
Description=Certbot
Documentation=file:///usr/share/doc/python-certbot-doc/html/index.html
Documentation=https://letsencrypt.readthedocs.io/en/latest/
[Service]
Type=oneshot
ExecStart=/usr/bin/certbot -q renew
PrivateTmp=true

# /lib/systemd/system/certbot.timer
[Unit]
Description=Run certbot twice daily

[Timer]
OnCalendar=*-*-* 00,12:00:00
RandomizedDelaySec=43200
Persistent=true

[Install]
WantedBy=timers.target
</code>
====== See also ======
  * [[wiki:letsencrypt_certificate_via_dns_authentication|Letsencrypt certificate via DNS authentication]]
  * [[wiki:setup_certificate_servers_without_root_access|Setup certificate on servers without root access]]
  * [[wiki:certbot troubleshooting]]
====== References ======
  * https://certbot.eff.org/docs/install.html#certbot-auto