安装插件

apt-get install certbot python3-certbot-dns-cloudflare

编辑配置

编辑 ~/.secrets/certbot/cloudflare.ini

dns_cloudflare_api_token = 0123456789abcdef0123456789abcdef01234567

获取证书

certbot certonly \
  --dns-cloudflare \
  --dns-cloudflare-credentials ~/.secrets/certbot/cloudflare.ini \
  --dns-cloudflare-propagation-seconds 20 \
  -d example.com

自动更新

systemctl enable certbot.timer
systemctl start certbot.timer