# create venv for Certbot
certbot-venv pip install certbot

# here goes your certbot configuration
# ref: https://eff-certbot.readthedocs.io/en/stable/intro.html

# - discover new systemd units
# - enable override for angie.service
systemctl daemon-reload

# enable new systemd units
systemctl enable certbot{,-ocsp-angie}.{service,timer}
systemctl start certbot{,-ocsp-angie}.timer