SSL Certificate Management
Certbot
# Install
sudo apt install certbot python3-certbot-nginx
# Get cert
sudo certbot --nginx -d example.com -d www.example.com
# Test renewal
sudo certbot renew --dry-run
# Auto-renewal (systemd)
sudo systemctl enable certbot.timer
Manual DNS Challenge
certbot certonly --manual --preferred-challenges dns -d example.com