How to create a certificate in live/ without link to archive/

I have a certificate located in /etc/letsencrypt/live/nonprod.gitsis.eu, which is not a symbolic link. When it’s about to expire, I attempt to issue a new one, but it always creates a folder in live/nonprod.gitsis.eu containing symbolic links to the archive/ directory.

Is there a way to generate the certificate directly in the live directory without creating symbolic links to archive/?

I ran this command:
certbot certonly --noninteractive --authenticator dns-hetzner --dns-hetzner-credentials /tmp/dns_api_token.ini --agree-tos --domains *.nonprod.gitsis.eu --email algitsis@gmail.com

i run on debian-12
certbot 2.11.0

No, not directly, that's just how Certbot works.

What's wrong with symbolic links? Any software should be able to use that without an issue..

As some kind of workaround you could write your own script and use it in a --deploy-hook. Within that script you can do whatever you want, as long as you don't mess up the existing files generated by Certbot.

3 Likes