acme.sh

Pure-shell ACME certificate issuance and renewal tool.

One-click install command

curl https://get.acme.sh | sh -s email=my@example.com

Notes

Port-80 validation needs root or port forwarding; pin a version in production.

Agent Prompt

Copy the block below and hand it to an AI Agent — replace [bracketed] parts with your own values.

Deploy acme.sh (Pure-shell ACME certificate issuance and renewal tool) in my environment.

Before starting:
1. Run read-only checks first: OS version, CPU architecture, available disk/RAM, port usage, Docker or sudo access — and report the findings.
2. Use the project source https://github.com/acmesh-official/acme.sh as ground truth; verify the current stable version, prerequisites and compatibility.
3. Present an execution plan, the files/services/firewall rules to be changed, and a complete rollback plan; wait for my confirmation before executing.
4. Download remote scripts locally for review first; pin tag / image digest / commit; don't rely on latest or master.
5. Never put secrets (passwords, API keys, tokens, subscription URLs) in the prompt, shell history or logs — use 600-permission env files, Docker secrets or _FILE variables instead.

Verified starting command (don't run blindly — download/expand and review first):
curl https://get.acme.sh | sh -s email=my@example.com

Project-specific notes:
- Port-80 validation needs root or port forwarding; pin a version in production.
- Permission requirement: Usually no root needed. Don't escalate privileges; don't run containers as root unnecessarily.

After execution, verify and report back:
- Installed version, service status and health check results;
- Open ports, listen addresses, firewall changes;
- Config files, data volumes, log and backup locations;
- Access method (for sensitive credentials, only state where they're stored — never print them);
- Restart policy, plus verified uninstall / rollback commands.

Related tools

• CaddyReverse proxy and web server with automatic HTTPS
• Nginx Proxy ManagerNginx reverse proxy and certificate management with a web UI