# see if there are any certificates
certbot certificates
# fix stop HAProxy to make sure Apache the host is accessible, but don't install into Apache, just use webrootstandalonesystemctl stop haproxy <strike>certbot --webroot -w /opt/htdocs/ -d demo.qualitybox.us</strike> certbot certonly --standalone -d fswiki.familysearch.org
# then run meza deploy to concatenate the cert files into a .pem file installed into HAproxy
# or if you have to do it manually
rm -f /etc/haproxy/certs/meza.crt
DOMAIN='demo.qualitybox.us' sudo -E bash -c 'cat /etc/letsencrypt/live/$DOMAIN/fullchain.pem /etc/letsencrypt/live/$DOMAIN/privkey.pem > /etc/haproxy/certs/$DOMAIN.pem'
# edit HAProxy to use the certificate
vim /etc/haproxy/haproxy.cfg
systemctl restart haproxy
systemctl status haproxy
