Wilgat / certbot-nginx

What is certbot-nginx?

certbot-nginx is a shell script for a secure Nginx setup with Let's Encrypt certificates via Certbot, emphasizing least-privilege access after install. Run `curl | sh` to grab it, then `sudo certbot-nginx` for interactive setup—it issues one cert for your main domain plus SANs, backs up configs, and adds Cloudflare origin protection. It solves the hassle of manual certbot nginx install on Ubuntu or Debian by creating a dedicated nginx-adm user that handles renewals and nginx controls without full root.

Why is it gaining traction?

It beats the official certbot nginx plugin by avoiding live config edits, using standalone mode for reliability, and providing dated backups plus restricted sudo for the adm user. Developers like the self-update, JSON diagnostics, and commands like `certbot-nginx domains` or `nginx-conf` for quick checks. The Cloudflare real_ip and deny-all setup hooks self-hosters needing proxy protection without complexity.

Who should use this?

Homelab operators on certbot nginx ubuntu 24.04 or Debian wanting automated certbot nginx renew without root every time. DevOps folks behind Cloudflare proxy manager, or those scripting certbot nginx docker compose deploys. Avoid if you're on Windows—stick to WSL—or need broad OS support beyond Linux.

Verdict

Try it for a defensive certbot nginx github alternative if security matters more than popularity—44 stars and 1.0% credibility score reflect its niche maturity, but docs and platform focus (Ubuntu/Debian best) make it reliable for targeted use. Solid for low-risk homelabs, less so for production fleets.