sudo snap install --classic certbot
sudo ln -s /snap/bin/certbot /usr/bin/certbot
DOMAIN=example.com
certbot certonly --manual -d *.$DOMAIN -d $DOMAIN --agree-tos --manual-public-ip-logging-ok --preferred-challenges dns-01 --server https://acme-v02.api.letsencrypt.org/directory --register-unsafely-without-email --rsa-key-size 4096
_acme-challenge=xxx _acme-challenge=xxx
sudo nginx -t
sudo systemctl restart nginx