Https

sudo certbot certonly --manual --preferred-challenges=dns -d '*.erp.tianjian.io'

sudo certbot --nginx