Let's Encrypt

 

https://qiita.com/sugimount/items/3f43c55141252f8f2968
https://qiita.com/cocotaro0202/items/18f5eeefed140060324d


OS: Ubuntu24

 

sudo apt update
sudo apt install software-properties-common -y
sudo add-apt-repository universe
sudo apt install certbot -y

 

sudo certbot certonly \
--key-type rsa \
--manual \
--domain example.com \
--email hoge@example.com \
--agree-tos \
--manual-public-ip-logging-ok \
--preferred-challenges dns

 

下記内容で、TXTレコードを作成
GoogleAdmin Toolboxで反映されたことを確認
エンター


_acme-challenge.example.com.
a945JkniTrG-VwaYWRyNKauGx_H53_czK9U_8dLOKBs


Certificate is saved at: /etc/letsencrypt/live/example.com/fullchain.pem
Key is saved at:         /etc/letsencrypt/live/example.com/privkey.pem

sudo su -

ls -l /etc/letsencrypt/live/example.com

lrwxrwxrwx 1 root root  41 Jul  3 11:46 cert.pem -> ../../archive/example.com/cert1.pem
lrwxrwxrwx 1 root root  42 Jul  3 11:46 chain.pem -> ../../archive/example.com/chain1.pem
lrwxrwxrwx 1 root root  46 Jul  3 11:46 fullchain.pem -> ../../archive/example.com/fullchain1.pem
lrwxrwxrwx 1 root root  44 Jul  3 11:46 privkey.pem -> ../../archive/example.com/privkey1.pem
-rw-r--r-- 1 root root 692 Jul  3 11:46 README


ls -l /etc/letsencrypt/archive/example.com


-rw-r--r-- 1 root root 1281 Jul  3 11:46 cert1.pem
-rw-r--r-- 1 root root 1566 Jul  3 11:46 chain1.pem
-rw-r--r-- 1 root root 2847 Jul  3 11:46 fullchain1.pem
-rw------- 1 root root  241 Jul  3 11:46 privkey1.pem


/etc/letsencrypt/live/example.com/cert1.pem
/etc/letsencrypt/live/example.com/privkey1.pem