Make sure to complete NGINX before.
Certbot creates SSL certificates that last around 90 days
OR if on the dev vm
Make sure to select http to https upgrade
In either case Certbot will edit the NGINX config with the matching
To renew the certificate simply run
Or to just dry run it