codebots/certbot repository overview

⁠certbot

A build of Certbot⁠ version 2.0.0 cross-compiled for multiple platforms including ARM

⁠Environment Vars

⁠Azure DNS

Set the following environment variables.

DNS_AZURE_SP_CLIENT_ID - Service principal ID DNS_AZURE_SP_CLIENT_SECRET - Service principal secret/password DNS_AZURE_TENANT_ID= - Tenant ID DNS_AZURE_ENVIRONMENT - Usually "AzurePublicCloud" (ssee docs above for more info) DNS_AZURE_ZONE1 - The resource ID of the DNS zone (see docs above for more info) DNS_AZURE_ZONE[N] - The resource ID of the additional DNS zones (see docs above for more info)

⁠Route53 DNS

DNS_ROUTE53_ACCESS_KEY_ID - Access Key ID DNS_ROUTE53_SECRET_ACCESS_KEY - Secret access key

⁠Generating a new certificate

docker run \
	-v certbot-config:/etc/letsencrypt \
	-v certbot-work:/var/lib/letsencrypt \
	-v certbot-logs:/var/log/letsencrypt \
	-e DNS_ROUTE53_ACCESS_KEY_ID=TODO -e DNS_ROUTE53_SECRET_ACCESS_KEY=TODO \
	codebots/certbot \
	certonly --noninteractive --agree-tos -m [email protected] --dns-route53 -d example.com

⁠Renew mode

Set the environment variable CERTBOT_MODE=renew to run the container in renew mode, which will sit in a loop and attempt to renew certificates (daily) when they are due to expire.

docker run \
	-v certbot-config:/etc/letsencrypt \
	-v certbot-work:/var/lib/letsencrypt \
	-v certbot-logs:/var/log/letsencrypt \
	-e CERTBOT_MODE=renew -e DNS_ROUTE53_ACCESS_KEY_ID=TODO -e DNS_ROUTE53_SECRET_ACCESS_KEY=TODO \
	codebots/certbot