1. Prepare the router

  1. Use portfw to forward port 80 and 445 to the ip of the computer where you have certbot installed

  1. Enable Secure Shell from Services tab

  1. Enable JFFS2 Support form Administration tab

1. Create the certificate

  1. Install certbot
`brew install certbot`

  1. Go to a folder where you will configure certbot

  1. Execute certbot to create the certificate

`certbot certonly --config-dir . --logs-dir . --work-dir .`

When promted select `Spin up a temporary webserver (standalone)`

  1. Go to `./live/[your.domain]`

  1. Create rsa key from private key

`openssl rsa -in privkey.pem -out key.pem`

1. ssh into the router

  1. cd to jffs

`cd /jffs`

  1. create startup folder

`mkdir startup`

  1. create the script (`binds_on_mount.sh`) that binds certificate files and make it executable

`chmod +x binds_on_mount.sh`

  1. create etc folder in jffs and cd in it

`mkdir /jffs/etc && cd /jffs/etc`

  1. create the certificate files from local certbot files

    1. paste contents of `key.pem`, `cert.pem` and `privkey.pem` into their respective file in `/jffs/etc`

  1. test by executing the script

1. Execute the script on startup

  1. save this command as `Startup` in Administration > Commands

`cd /jffs/startup && ./binds_on_mount.sh > ./log`