AA ACME

Automating TLS certificates on FreeBSD

“Let’s Encrypt certificate expiration notice” a dreaded e-mail subject. After several more reminders I would login to my webserver and run the holy certbot trinity: service nginx stop, certbot renew, service nginx start. And every time I would run these commands I would think, I really should automate this. The final push to actually do this was when I learned that the certificate lifetime would be reduced to 47 days (Ballot SC081v3. So after many years of manual renewal, I decided to document my automated certificate renewal process.