Setup Certificates for a New URL

SSH into INDRA (where the URL points to)
Run sudo certbot --nginx -d $YOUR_URL

Renew Certificates for a New URL

This should not be necessary, as modern installations set up a cron job to do this twice daily.

In case you have to do this manually:

SSH into INDRA (where the URL points to)
Run sudo certbot renew (you can add --dry-run to simulate it without persisting changes)

Why INDRA?

The URL gitea.dev.isn.edu.au points to INDRA, where nginx is configured to proxy requests to our TrueNAS host, which runs Gitea as a managed application.