That’s not the case, you just need to be able to make an outbound connection.
The minutiae of how certbot works or if that specific person actually did it right or wrong is kind of aside the point of my “intended to be funny but seemingly was not” comment about how sometimes the easiest solution to implement is the one you remember, even if it’s overkill for the immediate problem.
I think they generated real certs, rather than self signed.
Then that’s actually against what was wanted. To get real certs, you have to open up the server to the internet.
That’s not the case, you just need to be able to make an outbound connection.
The minutiae of how certbot works or if that specific person actually did it right or wrong is kind of aside the point of my “intended to be funny but seemingly was not” comment about how sometimes the easiest solution to implement is the one you remember, even if it’s overkill for the immediate problem.