Let's Encrypt webroot renewal method.
--- /dev/null Thu Jan 01 00:00:00 1970 +0000
+++ b/deb/apache-letsencrypt.bash Mon Jul 31 00:21:56 2023 +0300
@@ -0,0 +1,21 @@
+#!/bin/bash
+
+mkdir /srv/www/letsencrypt
+chown apache:apache /srv/www/letsencrypt
+
+# service apache2 stop
+# --standalone
+sudo -u apache \
+ certbot certonly --webroot \
+ --agree-tos --non-interactive \
+ -m gavenkoa@gmail.com \
+ -w /srv/www/letsencrypt \
+ --cert-name defun.work \
+ -d 2048.defun.work
+# service apache2 start
+
+# https://wiki.debian.org/LetsEncrypt
+# python3-certbot-apache - Apache plugin for Certbot
+
+# systemctl reload apache2
+# sudo certbot --apache --agree-tos --redirect -m youremail@email.com -d domainname.com -d www.domainname.com