$ pip install -r requirements.txt

# create certs
# NOTE: you can omit --deploy-hook if you do not want to upload certs to ali slb
$ certbot certonly \
	--server https://acme-v02.api.letsencrypt.org/directory \
	--preferred-challenges dns-01 \
	-d *.example.com \
	-d a.example.com \
	-d b.example.com \
	--email [email protected] \
	--eff-email --agree-tos --manual-public-ip-logging-ok \
	--manual \
	--manual-auth-hook ./auth-hook.py \
	--manual-cleanup-hook ./cleanup-hook.py \
	--deploy-hook ./deploy.py

# renew
$ certbot renew