I'm nursing a small fleet of CentOS 7 servers while we finish up migrations and upgrades this year. Most of these servers need certificates, but the built-in c

I'm nursing a small fleet of CentOS 7 servers while we finish up migrations and upgrades this year. Most of these servers need certificates, but the built-in certbot package is really brittle (if not actually broken) depending on what plugins you might need to use. So I wrote a short wrapper script that handles everything for me: https://gist.github.com/xenophonf/893b323b99644290fad420a54c7688c2 https://gist.github.com/xenophonf/893b323b99644290fad420a54c... It keeps the custom certbot install updated, and if anything goes wrong—and only if something goes wrong—I'll get an email thanks to chronic. Same goes for the install command outputs when running the wrapper/certbot interactively. You'll only see error messages when something breaks. Otherwise, it looks exactly like certbot was invoked directly, just with a short delay while the script does the install/update in the background.