ssl

Generate a hardened TLS config (protocols, ciphers, session settings) for Nginx, Apache, HAProxy, or Caddy, per Mozilla's SSL profiles.

Generate the Certbot install and certonly commands for Nginx or Apache.

Generate Certbot's renewal systemd timer and an equivalent cron entry.