Is there an up-to-date guide on adding HTTPS (i.e. using acme.sh, socat missing)

I spent a few houres trying to follow several guides and non of them worked (does not seem to anything in the main documentasion).

Geting there buy not quite.

I have DYDNS service setup (noip.com) and I can use the URL localy. I also setup port forwarding on my router, and a IP resovation.

I have acme.sh installed (git clone) and tried getting the certificate

acme.sh git:(master) ./acme.sh --issue -d mydomain.hopto.org --standalone

but got

Fri Jun 9 02:31:59 BST 2023] Using CA:` [`https://acme.zerossl.com/v2/DV90`](https://acme.zerossl.com/v2/DV90)
[Fri Jun 9 02:31:59 BST 2023] Please install socat tools first.[Fri Jun 9 02:31:59 BST 2023] _on_before_issue.

How do I get socat? apt and snap are not installed

I think this is what I need to do then copy fullchain.pem and privkey.pem to /ssl then restart NginX.

or do I need to do this on another box rather than HA and copy the .pem files to /ssl on HA? . That’s fine but I want to set it up to auto-renew so may be doing this all wrong.

Maybe the folowing will work (does not need webropute) but dont want to just try it incase it breakes something.

acme.sh git:(master) ./acme.sh --issue -d mydomain.hopto.org --webroute /ssl