The switches would need to be there for a GUI anyway. There would be a drop-down menu to select the authentication type (--webroot), a folder selection field to

The switches would need to be there for a GUI anyway. There would be a drop-down menu to select the authentication type (--webroot), a folder selection field to specify the web root directory (-w /srv/_default), and a list of domain names to certify (-d systemd.software -d www.systemd.software). How else would you configure the options? systemd.software is just a website and isn't related to running certbot. Indeed, if you'd visit the site you'd see I have a lot of gripes about systemd too! Systemd here is only used as an example for the renewal service. It actually just calls `certbot renew`: $ cat /usr/lib/systemd/system/certbot-renew.service [Unit] Description=This service automatically renews any certbot certificates found [Service] EnvironmentFile=/etc/sysconfig/certbot Type=oneshot ExecStart=/usr/bin/certbot renew --noninteractive --no-random-sleep-on-renew $PRE_HOOK $POST_HOOK $RENEW_HOOK $DEPLOY_HOOK $CERTBOT_ARGS The important bit here is the ExecStart: it's just `certbot renew --noninteractive --no-random-sleep-on-renew` which is indeed a lot of stuff to remember.