#!/usr/bin/env bash

tld=rob.tn
fqdn=${tld}
sudo certbot certonly \
    -m ops@${tld} \
    --agree-tos \
    --no-eff-email \
    --noninteractive \
    --cert-name ${fqdn} \
    --expand \
    --allow-subset-of-names \
    --key-type ecdsa \
    --dns-cloudflare \
    --dns-cloudflare-credentials /root/.cloudflare/${tld} \
    --dns-cloudflare-propagation-seconds 60 \
    -d ${fqdn}