<p>
Back in <a  href="https://hackerpublicradio.org/eps.php?id=3289">hpr3289 :: NextCloud the hard way</a>, I showed you how to install a Let's Encrypt SSL cert for use on your home network. One of the problems was the fact that the automatic renew tools won't work.
</p>
<p>
Today I got a reminder email from Let's Encrypt and I used the exact same command to renew it as I did to create it in the first place. The tool is smart enough to know this is a renewal process. 
</p>
<p>
One thing I forgot to do last time was to remove the <em>TXT</em> record from DNS after I was done. So I had to delete the record and wait a while for the Time To Live (TTL) to expire.
</p>
<p>
I set about doing a check list so the next time the process can be even faster.
</p>
<ol>
<li>Run the command <pre>certbot certonly --manual --preferred-challenges dns</pre></li>
<li>Deploy a DNS TXT record under the name _acme-challenge.nextcloud.example.com</li>
<li>Finish the challenge.</li>
<li>When successful, remove the DNS TXT record as it's not needed for another two months.</li>
</ol>