LetsEncrypt

sudo apt install certbot python3-certbot-apache
sudo apache2ctl configtest
sudo systemctl reload apache2
sudo ufw allow 'Apache Full'

sudo certbot --apache

// Check auto renewal status
sudo systemctl status certbot.timer]