# Self Hosted Letscrypt Certificate Configuration using certbot

**URL:** <https://forum.communityhealthtoolkit.org/t/self-hosted-letscrypt-certificate-configuration-using-certbot/858>\
**Category:** Technical Support\
**Tags:** configuration, docker\
**Created:** [July 29, 2020, 1:07pm UTC](https://forum.communityhealthtoolkit.org/t/self-hosted-letscrypt-certificate-configuration-using-certbot/858 "2020-07-29T13:07:09Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![munjoma](https://communityhealthtoolkit.b-cdn.net/user_avatar/forum.communityhealthtoolkit.org/munjoma/32/194_2.png) [@munjoma](https://forum.communityhealthtoolkit.org/u/munjoma)\
**Post date:** [July 29, 2020, 1:07pm UTC](https://forum.communityhealthtoolkit.org/t/self-hosted-letscrypt-certificate-configuration-using-certbot/858/1 "2020-07-29T13:07:10Z")

</div>

Hi,

Having gone through [SSL Cert Installation](https://docs.communityhealthtoolkit.org/apps/guides/hosting/ssl-cert-install/) I would like to find out if it is possible to use certbot and a custom domain to install a Letscrypt certificate

---

<div class="post-metadata">

**Author:** ![nyika](https://communityhealthtoolkit.b-cdn.net/user_avatar/forum.communityhealthtoolkit.org/nyika/32/74_2.png) [@nyika](https://forum.communityhealthtoolkit.org/u/nyika)\
**Post date:** [July 29, 2020, 1:31pm UTC](https://forum.communityhealthtoolkit.org/t/self-hosted-letscrypt-certificate-configuration-using-certbot/858/2 "2020-07-29T13:31:38Z")

</div>

Hey @munjoma, this is possible. However, since containers are stateless ( all installs in them are ephemeral) it may be wise to install certbot on your docker host that way you don’t have to re-install it on container restart. the certificates can be installed in the `/srv/settings/medic-core/nginx/private` directory with updates made to the nginx.conf file in `/srv/settings/medic-core/nginx` . You can then restart Nginx with this command inside the container `/boot/svc-restart medic-core nginx`. Alternatively, you can set up an Nginx proxy at your container host and expose port 80/ 5988 from the container then install certbot and the certificates from there. You then encrypt traffic from the host upwards.