Based on this article https://dev.to/istarkov/fast-and-easy-way-to-setup-web-developer-certificates-450e
sudo rm -rf /tmp/certbot/ sudo rm -rf /tmp/letsencrypt/ mkdir -p /tmp/certbot/ mkdir -p /tmp/letsencrypt/ infisical login # When running infisical init, select: Webstudio > webstudio infisical init CLOUDFLARE_API_KEY=$(infisical secrets get WSTD_DEV-CLOUDFLARE_ZONE_TOKEN --path='/CLI' --env=staging --plain) # Create cloudflare.ini with proper formatting and permissions echo "dns_cloudflare_api_token = ${CLOUDFLARE_API_KEY}" > /tmp/certbot/cloudflare.ini chmod 600 /tmp/certbot/cloudflare.ini docker run -it --rm --name certbot \ -v "/tmp/letsencrypt/data:/etc/letsencrypt" \ -v "/tmp/certbot:/local/certbot" \ certbot/dns-cloudflare certonly \ --dns-cloudflare \ --dns-cloudflare-credentials /local/certbot/cloudflare.ini \ --agree-tos \ --noninteractive \ -m [email protected] \ -d wstd.dev \ -d '*.wstd.dev' sudo chown -R $USER:$(id -g) /tmp/letsencrypt cp /tmp/letsencrypt/data/live/wstd.dev/fullchain.pem ./https/fullchain.pem cp /tmp/letsencrypt/data/live/wstd.dev/privkey.pem ./https/privkey.pem # Haproxy key cd https cat ./fullchain.pem ./privkey.pem > ./haproxy.pem