certbot-nginx
Nginx plugin for Certbot
What it is and what it does
Certbot-nginx is a plugin that extends Certbot to work directly with nginx web servers. It automates the process of obtaining a domain-validated TLS certificate from Let's Encrypt and installing it into your nginx configuration. The plugin handles the ACME challenge process by modifying nginx configuration temporarily to prove domain ownership, then deploys the certificate and restores the original configuration.
This package is intended for system administrators running nginx on Linux who want to automate HTTPS setup and renewal without manual certificate management. It requires root access to the web server and must be run directly on the machine hosting nginx. The plugin integrates with Certbot's broader ecosystem, supporting certificate revocation, automatic renewal, and configuration rollback if something goes wrong.
Use it for:
- Automatically obtain and deploy a Let's Encrypt certificate to an nginx server with a single command.
- Set up automatic certificate renewal so HTTPS stays active without manual intervention.
- Migrate an existing nginx site from HTTP to HTTPS with minimal downtime.
- Manage certificates for multiple domains on a single nginx instance.
- Revoke or replace a certificate when needed through Certbot's standard workflows.
Worth the install?
AI-flagged interpretation of the facts on this page — verify before relying
Certbot-nginx is a plugin for Certbot that automates obtaining and deploying TLS certificates from Let's Encrypt to nginx web servers.
Yes—if you run nginx on Linux and want to use Let's Encrypt certificates. The plugin is production-stable, actively maintained, has no known vulnerabilities, and requires only Certbot as a dependency. Install it when you need to automate certificate lifecycle management for nginx; skip it if you use a different web server or prefer manual certificate handling.
Install
certbot-nginx on PyPI
pip
pip install certbot-nginxuv
uv add certbot-nginxpoetry
poetry add certbot-nginxInstalling certbot-nginx
Before you install
Low install friction with a single runtime dependency on certbot. The package is actively maintained with a recent release and no known vulnerabilities, making it straightforward to add to an existing Certbot installation.
License in practice
Licensed under Apache-2.0 (permissive), allowing use in commercial and private projects with minimal restrictions—just retain license notices.
Quickstart
pip install certbot-nginx
# Then use certbot with nginx plugin:
# certbot --nginx -d example.com
Requires root or administrator access to the web server and nginx to be installed and running on the same machine where Certbot is executed.
Verify before relying
- Whether the plugin supports nginx versions older than 0.8.48 or newer than what was tested in the current release.
- Specific nginx configuration formats or edge cases the plugin may not handle automatically.
Package facts
| License | Apache-2.0 (permissive) |
| Python support | supports the current Python release (>=3.10) |
| Install friction | low — pure-Python wheel |
| Runtime dependencies | 1 — certbot |
| Maintenance | actively maintained — 30 days since the last release |
| Last repo commit | |
| First released | |
| Downloads | 133,589/month — #11,502 on PyPI (30-day window, as of 2026-08-14) |
| Known vulnerabilities | none known (OSV.dev, checked 2026-08-14) |
Evidence: certbot_nginx-5.7.0-py3-none-any.whl
Tags
More WWW/HTTP packages
urllib3 is an HTTP client library that provides…
permissive · top 100 on PyPI
requestsRequests is a Python HTTP library that…
permissive · top 100 on PyPI
h11h11 is a pure-Python HTTP/1.1 protocol…
permissive · top 100 on PyPI
httpxHTTPX is a fully featured HTTP client library…
permissive · top 100 on PyPI
httpcoreA minimal low-level HTTP client library that…
permissive · top 100 on PyPI
aiohttpaiohttp is an async HTTP client and server…
permissive · top 100 on PyPI
certbotCertbot is a command-line client that…
permissive · top 15,000 on PyPI
certbot-dns-cloudflareAutomates DNS validation for Let's Encrypt…
permissive · top 5,000 on PyPI
acmeImplements the ACME protocol to automate…
permissive · top 5,000 on PyPI
certbot-dns-route53A Certbot plugin that automates DNS validation…
permissive · top 15,000 on PyPI
certbot-dns-directadminA Certbot plugin that automates DNS-01…
unclear · top 15,000 on PyPI
certbot-dns-duckdnsA certbot plugin that automates DNS-01…
permissive · top 15,000 on PyPI
certbot-dns-multiA Certbot DNS plugin that automates ACME DNS…
permissive · top 15,000 on PyPI
certifiCertifi provides Mozilla's curated collection…
copyleft · top 100 on PyPI
secure-smtplibProvides secure SMTP subclasses with TLS/SSL…
unclear · top 15,000 on PyPI
crossplaneParses NGINX configuration files into JSON and…
permissive · top 5,000 on PyPI