Install Let's Encrypt SSL with Certbot (Apache) on Gentoo Linux

Step 1 – Install

emerge --ask app-crypt/certbot app-crypt/certbot-apache

Step 2 – Obtain and install

certbot --apache -d example.com -d www.example.com

Step 3 – Verify

apachectl configtest && systemctl reload apache2
curl -I https://example.com

Step 4 – Auto-renewal

0 3 * * * certbot renew --quiet --deploy-hook "systemctl reload apache2"

Step 5 – Wildcard (DNS challenge)

certbot certonly --manual --preferred-challenges dns -d "*.example.com" -d example.com