https://github.com/tdiprima/certbot-autorenew
Automated SSL/TLS cert lifecycle management with Certbot — ACME/EAB support, cross-distro installs, and scheduled renewals.
https://github.com/tdiprima/certbot-autorenew
acme automation certbot lets-encrypt ssl-certificates
Last synced: 1 day ago
JSON representation
Automated SSL/TLS cert lifecycle management with Certbot — ACME/EAB support, cross-distro installs, and scheduled renewals.
- Host: GitHub
- URL: https://github.com/tdiprima/certbot-autorenew
- Owner: tdiprima
- License: mit
- Created: 2025-10-20T16:09:09.000Z (8 months ago)
- Default Branch: main
- Last Pushed: 2026-06-23T13:42:33.000Z (3 days ago)
- Last Synced: 2026-06-23T15:28:17.539Z (3 days ago)
- Topics: acme, automation, certbot, lets-encrypt, ssl-certificates
- Language: Shell
- Homepage:
- Size: 25.4 KB
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# acme-autopilot
Automate SSL/TLS certificate management with Certbot.
## Why Automate?
Certificate lifespans are steadily decreasing, making automation essential. Manual certificate renewal is error-prone and time-consuming.
## Primary Tool: Certbot
This repository uses **Certbot** for automated certificate acquisition and renewal. The scripts support:
- Cross-platform deployment (Red Hat, CentOS, Fedora, Ubuntu, Debian)
- InCommon/Sectigo ACME integration with EAB (External Account Binding)
- Automated web server configuration
- Scheduled renewals via systemd timers or cron
## Quick Start
### Automated Setup
The main setup script handles everything:
```sh
cd src/certbot
sudo ./auto_cert_setup.sh
```
This script will:
1. Detect your OS (Red Hat-based or Debian-based)
2. Install Certbot (via EPEL on RHEL or Snap on Ubuntu/Debian)
3. Request certificates using your configured ACME server
4. Configure automatic renewals
5. Set up post-renewal hooks
### Post-Renewal Actions
The `run_after.sh` script handles post-renewal tasks like web server restarts.
## Alternative: acme.sh
Legacy scripts using acme.sh are available in `src/acme/` but Certbot is now the recommended approach.
## License
See [LICENSE](LICENSE) for details.