chore: init

script/setup/cert.sh

@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+
+tld=lair.cafe
+fqdn=rpm.${tld}
+sudo certbot certonly \
+    -m ops@${tld} \
+    --agree-tos \
+    --no-eff-email \
+    --noninteractive \
+    --cert-name ${fqdn} \
+    --expand \
+    --allow-subset-of-names \
+    --key-type ecdsa \
+    --dns-cloudflare \
+    --dns-cloudflare-credentials /root/.cloudflare/${tld} \
+    --dns-cloudflare-propagation-seconds 60 \
+    -d ${fqdn}