certbot-lambda

Running Certbot on AWS Lambda.

Inspired by Deploying EFF's Certbot in AWS Lambda.

Features

• Supports wildcard certificates (Let's Encrypt ACME v2).
• Uploads certificates to specified Amazon S3 bucket.
• Works with CloudWatch Scheduled Events for certificate renewal.
• Use Terraform to deploy to AWS (See terraform folder).

How to archive zip file for lambda function

./package.sh

How to update certbot version

• Source virtualenv

source certbot/venv/bin/activate

• Recreate requirements.txt with any plugins

readonly CERTBOT_VERSION=1.17.0
readonly CERTBOT_DNS_TENCENTCLOUD_VERSION=1.3.0
pip3 install \
    certbot==${CERTBOT_VERSION} \
    certbot-dns-route53==${CERTBOT_VERSION} \ 
    certbot-dns-tencentcloud==${CERTBOT_DNS_TENCENTCLOUD_VERSION} # Optional dns plugin

• Create new requirements file

# https://stackoverflow.com/questions/39577984/what-is-pkg-resources-0-0-0-in-output-of-pip-freeze-command
pip freeze | grep -v "pkg-resources" > requirements.txt