ubuntu 24.04 LTSで自宅サーバー構築（Let's Encryptの取得）

<a href="https://px.a8.net/svt/ejp?a8mat=3ZDGSF+2P1TSA+50+35HNC2" rel="nofollow">ドメインの運用ならお名前.comレンタルサーバーにお任せ★月額990円(税込)〜★</a>
<amp-pixel src="https://www14.a8.net/0.gif?a8mat=3ZDGSF+2P1TSA+50+35HNC2" layout="nodisplay"></amp-pixel>
taisuke@ubuntuserver:~$ sudo apt -y install certbot
taisuke@ubuntuserver:~$ sudo certbot certonly --webroot -w /var/www/html -d ご自身のサーバーのドメイン名
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Enter email address (used for urgent renewal and security notices)
#初回のみメールアドレスの登録と利用条件への同意が必要
#受信可能なメールアドレスを指定
 (Enter 'c' to cancel): ご自身のメールアドレス
 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Please read the Terms of Service at https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf. You must agree in order to register with the ACME server. Do you agree?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
#利用条件に同意する
(Y)es/(N)o: Y
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Would you be willing, once your first certificate is successfully issued, to
share your email address with the Electronic Frontier Foundation, a founding
partner of the Let's Encrypt project and the non-profit organization that
develops Certbot? We'd like to send you email about our work encrypting the web,
EFF news, campaigns, and ways to support digital freedom.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
#Certbot 開発の非営利団体 Electronic Frontier Foundation にもメールアドレスを登録するか否か
(Y)es/(N)o: Y
Account registered.
Requesting a certificate for dns.srv.world

Successfully received certificate.
Certificate is saved at: /etc/letsencrypt/live/dns.srv.world/fullchain.pem
Key is saved at:         /etc/letsencrypt/live/dns.srv.world/privkey.pem
This certificate expires on 2024-07-29.
These files will be updated when the certificate renews.
Certbot has set up a scheduled task to automatically renew this certificate in the background.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
If you like Certbot, please consider supporting our work by:
 * Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
 * Donating to EFF:                    https://eff.org/donate-le
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
#[Successfully received certificate] と表示さえれば成功
#メッセージ中に記載の通り [/etc/letsencrypt/live/(FQDN)/] 配下に証明書が取得されている
#cert.pem       ⇒ SSLサーバー証明書 (公開鍵含む)
#chain.pem      ⇒ 中間証明書
#fullchain.pem  ⇒ cert.pem と chain.pem が結合されたファイル
#privkey.pem    ⇒ 公開鍵に対する秘密鍵
#Certbot パッケージはタイマーが付属
taisuke@ubuntuserver:~$ sudo systemctl status certbot.timer
*  certbot.timer - Run certbot twice daily
     Loaded: loaded (/usr/lib/systemd/system/certbot.timer; enabled; preset: en>
     Active: active (waiting) since Mon 2024-04-29 13:18:16 UTC; 2min 37s ago
    Trigger: Tue 2024-04-30 07:08:27 UTC; 17h left
   Triggers: *  certbot.service

taisuke@ubuntuserver:~$ sudo systemctl list-timers certbot.timer --no-pager
NEXT                        LEFT LAST PASSED UNIT          ACTIVATES
Tue 2024-04-30 07:08:27 UTC  17h -         - certbot.timer certbot.service
1 timers listed.
Pass --all to see loaded but inactive timers, too.
#デフォルトでは以下のように毎日 2回 [renew] 実行
taisuke@ubuntuserver:~$ sudo systemctl cat certbot.timer
#/lib/systemd/system/certbot.timer
[Unit]
Description=Run certbot twice daily
[Timer]
OnCalendar=*-*-* 00,12:00:00
RandomizedDelaySec=43200
Persistent=true
[Install]
WantedBy=timers.target
taisuke@ubuntuserver:~$ sudo systemctl cat certbot.service
#/lib/systemd/system/certbot.service
[Unit]
Description=Certbot
Documentation=file:///usr/share/doc/python-certbot-doc/html/index.html
Documentation=https://certbot.eff.org/docs
[Service]
Type=oneshot
ExecStart=/usr/bin/certbot -q renew
PrivateTmp=true
#手動で更新する場合は以下
taisuke@ubuntuserver:~$ sudo certbot renew
<a href="https://px.a8.net/svt/ejp?a8mat=3ZDGSF+2P1TSA+50+35HNC2" rel="nofollow">ドメインの運用ならお名前.comレンタルサーバーにお任せ★月額990円(税込)〜★</a>
<amp-pixel src="https://www14.a8.net/0.gif?a8mat=3ZDGSF+2P1TSA+50+35HNC2" layout="nodisplay"></amp-pixel>