./.access should have 400 permissions and should contain dns_digitalocean_token = <redacted>
sudo pacman -S certbot-dns-digitalocean
sudo certbot certonly --dns-digitalocean --dns-digitalocean-credentials ./.access -d '*.hsnipe.moe' -d 'hsnipe.moe'
sudo cat /etc/letsencrypt/live/hsnipe.moe/privkey.pem /etc/letsencrypt/live/hsnipe.moe/cert.pem > haproxy.pem
scp haproxy.pem [email protected]:/mnt/
Rest of configuration is done on server side / infra code