[メモ] ワイルドカード証明書の取得&更新（certbot + certbot-dns-cloudflare @ Ubuntu 20.04 LTS）

certbotとpluginの導入

sudo apt install certbot
sudo apt install python3-certbot-dns-cloudflare

CloudflareのAPI Keyを取得

sudo mkdir /root/.cloudflare/
sudo vim /root/.cloudflare/credentials

dns_cloudflare_email = "Mail"
dns_cloudflare_api_key = "APIKEY"

sudo chmod 700 /root/.cloudflare
sudo chmod 600 /root/.cloudflare/credentials

証明書の取得

sudo certbot certonly \
--dns-cloudflare \
--dns-cloudflare-credentials /root/.cloudflare/credentials \
--dns-cloudflare-propagation-seconds 60 \
-d example.com \
-d *.example.com

certbot.timer を有効化

sudo systemctl enable --now certbot.timer

sudo systemctl status certbot

● certbot.timer - Run certbot twice daily
     Loaded: loaded (/lib/systemd/system/certbot.timer; enabled; vendor preset: enabled)
     Active: active (waiting) since Wed 20xx-xx-xx xx:xx:xx UTC; 24h ago
    Trigger: Fri 20x-xx-xx x:xx:xx UTC; 9h left
   Triggers: ● certbot.service