About

Imported from terminalskills/skills (skills/letsencrypt/SKILL.md). Install upstream with npx skills add terminalskills/skills --skill letsencrypt. Copyright stays with the author (Apache-2.0).

Let's Encrypt

Name: letsencrypt
Author: terminalskills

Overview

Let's Encrypt provides free, automated TLS certificates. Certbot is the official client — obtains and renews certificates automatically. Supports Nginx, Apache, standalone, and DNS validation for wildcards.

Instructions

Step 1: Install Certbot

sudo apt install certbot python3-certbot-nginx

Step 2: Get Certificate

# Automatic Nginx configuration
sudo certbot --nginx -d example.com -d www.example.com

# Standalone (no web server needed)
sudo certbot certonly --standalone -d example.com

# DNS validation (for wildcards)
sudo certbot certonly --manual --preferred-challenges dns -d "*.example.com"

Step 3: Auto-Renewal

# Certbot installs a systemd timer automatically
sudo systemctl status certbot.timer
sudo certbot renew --dry-run    # test renewal

Step 4: Docker with Traefik

# docker-compose.yml — Automatic TLS with Traefik
services:
  traefik:
    image: traefik:v3
    command:
      - --entrypoints.websecure.address=:443
      - --certificatesresolvers.le.acme.email=admin@example.com
      - --certificatesresolvers.le.acme.storage=/acme/acme.json
      - --certificatesresolvers.le.acme.httpchallenge.entrypoint=web
    ports: ["80:80", "443:443"]
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - acme:/acme
volumes:
  acme:

Guidelines

Certificates valid for 90 days — auto-renewal handles this.
Rate limits: 50 certs per domain per week.
Use DNS validation for wildcard certs and internal servers.
For containers, Traefik or Caddy handle Let's Encrypt automatically.

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

yaml

targets:
  - https://api.opensmartroute.ai/api/v1/registry/terminalskills-skills-letsencrypt/manifest   # or paste the manifest below

Manifest

An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.

terminalskills-skills-letsencrypt.ocm.jsonjson

{
  "ocm": "1",
  "id": "terminalskills-skills-letsencrypt",
  "kind": "skill",
  "name": "letsencrypt",
  "description": "Get free TLS certificates with Certbot and Let's Encrypt. Use when a user asks to add HTTPS to a website, get a free SSL certificate, auto-renew certificates, or secure a web server with TLS.",
  "publisher": "terminalskills",
  "version": "1.0.0",
  "capabilities": {
    "domains": [
      "general"
    ],
    "tags": [
      "skill-md",
      "letsencrypt",
      "tls",
      "ssl",
      "https",
      "certbot",
      "skills-sh"
    ],
    "languages": [
      "en"
    ]
  },
  "quality_prior": 0.6,
  "examples": [
    "Get free TLS certificates with Certbot and Let's Encrypt. Use when a user asks to add HTTPS to a website, get a free SSL certificate, auto-renew certificates, or secure a web server with TLS."
  ],
  "primary": false,
  "metadata": {
    "source": {
      "provider": "skills.sh",
      "repository": "https://github.com/terminalskills/skills",
      "path": "skills/letsencrypt/SKILL.md",
      "ref": "HEAD",
      "url": "https://github.com/terminalskills/skills/blob/HEAD/skills/letsencrypt/SKILL.md",
      "key": "terminalskills/skills/skills/letsencrypt/SKILL.md"
    },
    "compatibility": "Any web server (Nginx, Apache, standalone)",
    "license": "Apache-2.0"
  },
  "instructions": "# Let's Encrypt\n\n## Overview\n\nLet's Encrypt provides free, automated TLS certificates. Certbot is the official client — obtains and renews certificates automatically. Supports Nginx, Apache, standalone, and DNS validation for wildcards.\n\n## Instructions\n\n### Step 1: Install Certbot\n\n```bash\nsudo apt install certbot python3-certbot-nginx\n```\n\n### Step 2: Get Certificate\n\n```bash\n# Automatic Nginx configuration\nsudo certbot --nginx -d example.com -d www.example.com\n\n# Standalone (no web server needed)\nsudo certbot certonly --standalone -d example.com\n\n# DNS validation (for wildcards)\nsudo certbo",
  "cost": {
    "context_tokens": 406
  }
}

Fetch it by URL: GET /api/v1/registry/terminalskills-skills-letsencrypt/manifest?version=1.0.0

Reviews

Star ratings from people who tried it. One review per account; edit yours any time.

No reviews yet. Install it, try it, and be the first to rate it.