How to Auto-Renew SSL Certificate

Step 1: Check Certbot Timer

sudo systemctl status certbot.timer

Step 2: Manual Renewal Test

sudo certbot renew --dry-run

Step 3: Force Renewal

sudo certbot renew --force-renewal

Step 4: Create Cron Job (if timer not available)

sudo crontab -e

Add:

0 0 1 * * /usr/bin/certbot renew --quiet

Step 5: Reload Web Server After Renewal

sudo certbot renew --post-hook "systemctl reload nginx"