apt install ./confconsole_2.1.2+14+g8c379d8_all.deb

 ! <omit> #** guess chmod still didn't help
 ! N: Download is performed unsandboxed as root as file '/root/confconsole_2.1.2+14+g8c379d8_all.deb' couldn't be accessed by user '_apt'. - pkgAcquire::Run (13: Permission denied)
 ! <omit>


mkdir -p /usr/local/src/venv
apt install -y python3.11-venv
python3 -m venv /usr/local/src/venv/lexicon
/usr/local/src/venv/lexicon/bin/pip install dns-lexicon[full]
ln -s /usr/local/src/venv/lexicon/bin/lexicon /usr/local/bin/lexicon
ln -s /usr/local/src/venv/lexicon/bin/tldextract /usr/local/bin/tldextract






[2023-12-02 01:01:30] dehydrated-wrapper: INFO: started
[2023-12-02 01:01:30] dehydrated-wrapper: WARNING: /etc/cron.daily/confconsole-dehydrated not found; copying default from /usr/share/confconsole/letsencrypt/dehydrated-confconsole.cron
# INFO: Using main config file /etc/dehydrated/confconsole.config
+ Generating account key...
+ Registering account key with ACME server...
+ Fetching account URL...
+ Done!
[2023-12-02 01:01:34] dehydrated-wrapper: INFO: No process found listening on port 443; continuing
[2023-12-02 01:01:34] dehydrated-wrapper: INFO: running dehydrated
# INFO: Using main config file /etc/dehydrated/confconsole.config
 + Creating chain cache directory /var/lib/dehydrated/chains
Processing sub.domain.nz
 + Creating new directory /var/lib/dehydrated/certs/sub.domain.nz ...
 + Signing domains...
 + Generating private key...
 + Generating signing request...
 + Requesting new certificate order from CA...
 + Received 1 authorizations URLs from the CA
 + Handling authorization for sub.domain.nz
 + 1 pending challenge(s)
 + Deploying challenge tokens...
[2023-12-02 01:01:38] confconsole.hook.sh: INFO: Deploying challenge for sub.domain.nz.
[2023-12-02 01:01:38] confconsole.hook.sh: INFO: Creating a TXT challenge-record with cloudflare.
RESULT
------
True




RESULT
------
True

 + Responding to challenge for sub.domain.nz authorization...
 + Challenge is valid!
 + Cleaning challenge tokens...
[2023-12-02 01:02:12] confconsole.hook.sh: INFO: Clean challenge for sub.domain.nz.

RESULT
------
True

 + Requesting certificate...
 + Checking certificate...
 + Done!
 + Creating fullchain.pem...
[2023-12-02 01:02:18] confconsole.hook.sh: SUCCESS: Cert request successful. Writing relevant files for sub.domain.nz.
[2023-12-02 01:02:18] confconsole.hook.sh: INFO: fullchain: /var/lib/dehydrated/certs/sub.domain.nz/fullchain.pem
[2023-12-02 01:02:18] confconsole.hook.sh: INFO: keyfile: /var/lib/dehydrated/certs/sub.domain.nz/privkey.pem
[2023-12-02 01:02:18] confconsole.hook.sh: SUCCESS: Files written/created for sub.domain.nz: /usr/local/share/ca-certificates/cert.crt - /etc/ssl/private/cert.key - /etc/ssl/private/cert.pem.
 + Done!
[2023-12-02 01:02:18] dehydrated-wrapper: INFO: dehydrated complete
[2023-12-02 01:02:18] dehydrated-wrapper: INFO: Cleaning backup cert & key
[2023-12-02 01:02:18] dehydrated-wrapper: INFO: (Re)starting webmin.service