Script to acquire Let's Encrypt SSL certificate using DNS challenge against Cloudflare.

acquire-ssl-certificate.sh

#! /bin/sh

email="me@example.com"
domains="example.com,*.example.com"
cloudflare_email="me@example.com"
cloudflare_api_key="me-api-key"

# END CONFIG

brew install certbot
$(brew --prefix certbot)/libexec/bin/pip install certbot-dns-cloudflare

echo "dns_cloudflare_email = $cloudflare_email" > cloudflare.ini
echo "dns_cloudflare_api_key = $cloudflare_api_key" >> cloudflare.ini
chmod 0600 cloudflare.ini

certbot certonly \
        -n \
        --agree-tos \
        --dns-cloudflare \
        --dns-cloudflare-credentials ./cloudflare.ini \
        --config-dir letsencrypt-config \
        --work-dir .letsencrypt \
        --logs-dir letsencrypt-log \
        -m $email \
        -d $domains