diff --git a/.gitignore b/.gitignore
index 0865db7..1d846c2 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,4 +1,3 @@
-derper/certbot.env
 derper/letsencrypt
 derper/certs
 derper/logs
\ No newline at end of file
diff --git a/derper/certbot.env b/derper/certbot.env
new file mode 100644
index 0000000..9b9bae8
--- /dev/null
+++ b/derper/certbot.env
@@ -0,0 +1,14 @@
+DOMAIN=headscale.jmsu.top
+CERTBOT_EMAIL=pylyzeng@gmail.com
+ALIYUN_ACCESS_KEY_ID=LTAI5tP1yWFMMJhF6nrGYEit
+ALIYUN_ACCESS_KEY_SECRET=xBEMX76UwvO21DCES2605VM0kAU7TV
+REGION=cn-hangzhou
+# 可选值：letsencrypt / zerossl
+ACME_PROVIDER=zerossl  
+
+# 仅在 ACME_PROVIDER=zerossl 时需要
+EAB_KID=1KHxI3W0xzi0-xL3Y2MGOg
+EAB_HMAC_KEY=UZuTHNbVNIz4Bubwi_i7eo2T5fWtfOmVU4AX49hpjKr1LW_Wf7ssoRtXE0kG5KSdUsXS2E9grpE9Wrr3XjVj8Q
+
+# （可选）额外 certbot 参数
+# CERTBOT_FLAGS="--rsa-key-size 4096"