apt update
apt install -y certbot python3-certbot-nginx

# Issue/renew certs for both apex and www:
certbot --nginx -d ilora.network -d www.ilora.network

# Optional: force an HTTP->HTTPS redirect (Certbot usually configures this)
nginx -t && systemctl reload nginx

# Verify:
curl -I https://ilora.network | sed -n '1p;/server:/Ip;/strict-transport-security/Ip'
certbot certificates

# Renewal test:
certbot renew --dry-run

# Ensure the systemd timer is active:
systemctl list-timers | grep -i certbot
sudo apt install certbot python3-certbot-nginx -y
sudo certbot --nginx -d ilora.network -d www.ilora.network