Table of Contents

,

certbot installation

For older versions see Install certbot via manual method

Debian 10

This will also install a systemd timer unit to automatically run the renewal procedure. See systemd units installed

Install it from repository: 

apt-get install certbot

If you are running apache you also need a plugin for it: 

apt install python-certbot-apache

You should now be able to just run 

certbot

on CLI.

Debian 11

Apache and nginx plugins have change names so: 

apt install python3-certbot-apache

or 

apt install python3-certbot-nginx

systemd units installed

# /lib/systemd/system/certbot.service
[Unit]
Description=Certbot
Documentation=file:///usr/share/doc/python-certbot-doc/html/index.html
Documentation=https://letsencrypt.readthedocs.io/en/latest/
[Service]
Type=oneshot
ExecStart=/usr/bin/certbot -q renew
PrivateTmp=true
 
# /lib/systemd/system/certbot.timer
[Unit]
Description=Run certbot twice daily
 
[Timer]
OnCalendar=*-*-* 00,12:00:00
RandomizedDelaySec=43200
Persistent=true
 
[Install]
WantedBy=timers.target

See also

References