generate letsencrypt cert using docker

generate-letsencrypt-certificate.sh

#!/bin/bash
set -e

HOST=$1
test "$UID" -ne "0" && echo "Must be root." >&2 && exit 2
test -z "$HOST" && echo -e "\n\tUSAGE: $0 HOST\n" >&2 && exit 2

echo HOST: $HOST
echo Generating SSL certificate...
docker run -it --rm --name certbot -v "$HOME/workspace/letsencrypt/etc:/etc/letsencrypt" -v "$HOME/workspace/letsencrypt/var:/var/lib/letsencrypt" certbot/dns-cloudflare certonly --agree-tos -d $HOST
cat etc/archive/$HOST/{privkey1.pem,fullchain1.pem} > server.pem
echo Generated: server.pem

## SETUP:
# mkdir etc
# echo "dns_cloudflare_api_token = " > etc/cloudflare.ini
# echo "authenticator = dns-cloudflare\ndns-cloudflare-credentials = /etc/letsencrypt/cloudflare.ini" > etc/cli.ini

## REFERENCES:
# https://certbot.eff.org/docs/install.html#running-with-docker
# https://certbot.eff.org/docs/using.html#configuration-file
# https://certbot-dns-cloudflare.readthedocs.io/en/stable/

certbot can be aliased to

docker run -it --rm --name certbot -v "$HOME/workspace/letsencrypt/etc:/etc/letsencrypt" -v "$HOME/workspace/letsencrypt/var:/var/lib/letsencrypt" certbot/dns-cloudflare