Install Certbot

When to use it

Before Configure Reverse Proxy, Configure Certificate Renewal or Check Certificate Renewal. It installs Certbot and requests no certificate.

This playbook has no options.

What it does on the server

1. On the RHEL family, enables EPEL, where Certbot is packaged.
2. Installs certbot and OpenSSL from the server's repositories. A certbot that did not come from the server's packages, such as a snap, is used as it is.
3. Checks that certbot runs.

The nginx plugin is deliberately not installed: it rewrites nginx's configuration, which Configure Reverse Proxy manages. Certificates are obtained with the webroot method instead, which serves the Let's Encrypt check file from a folder and changes nothing else.

After the run

Run Configure Reverse Proxy to obtain a certificate and serve your site over HTTPS, or use the Nginx Reverse Proxy + Auto-Renewing SSL template, which runs all of these in order.

Common problems

"Certbot is not available from this server's repositories." — The server's configured repositories do not include Certbot, which can happen on Amazon Linux 2023. Nothing was changed. Use an Ubuntu, Debian or RHEL-family server for HTTPS with this platform, or install Certbot on this one another way; the other certificate playbooks then use it.