graphene-os-server-infrastructure/certbot/matrix.grapheneos.org

certbot certonly –webroot –webroot-path /srv/certbot –no-eff-email \ –key-type ecdsa –reuse-key –must-staple –preferred-chain "ISRG Root X1" \ –deploy-hook "/usr/local/bin/certbot-ocsp-fetcher -o /etc/nginx/ocsp-cache" \ –cert-name matrix.grapheneos.org \ -d matrix.grapheneos.org \ -d mta-sts.matrix.grapheneos.org \ -d element.grapheneos.org