Set up letsencrypt certificate with Apache and renew automatically

1-letsencrypt-setup.sh

# Note: this must be executed on the server hosting the domain name!

# Install required packages on RHEL / Fedora:
# EPEL might be required on RHEL: https://fedoraproject.org/wiki/EPEL
sudo yum install -y certbot python3-certbot-apache

# Set up letsencrypt: validates the domain, generates a certificate, and updates Apache config
# Replace example.tld with your domain name
# Add multiple -d if you need to support multiple domains
sudo certbot --apache -d example.tld -d example2.tld

2-letsencrypt-cron.sh

# Run every day; will only renew when necessary
# Note: this is using the standalone challenge, and requires to briefly stop Apache to make port 80 available;
# there are better challenges than this one. Only use on low traffic times (at night).

systemctl stop httpd
certbot renew
systemctl start httpd