@ajz@social.linux.pizza Certbot will handle all of the configuration for you: https://certbot.eff.org/ It installs the certificate in your config file, and auto renews it with a cron job. This is what the configuration for one of my sites looks like: