Auto refresh LetsEncrypt cert for NGINX

letsencrypt-cert

#!/bin/bash

echo "Running as user $USER"

DIR=/home/letsencrypt/letsencrypt
DOMAIN=mydomain.com

$DIR/letsencrypt-auto -a webroot --webroot-path /home/letsencrypt/webroot/ \
   --config-dir /home/letsencrypt/etc \
   --logs-dir /home/letsencrypt/log \
   --work-dir /home/letsencrypt/lib \
   --agree-dev-preview \
   --renew-by-default \
   --server https://acme-v01.api.letsencrypt.org/directory \
   -d "www.$DOMAIN" -d "$DOMAIN" certonly

letsencrypt-cron

#Copy this file into /etc/cron.d

SHELL=/bin/sh
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin

# m h dom mon dow user  command
@monthly /home/letsencrypt/letsencrypt-nginx

letsencrypt-nginx

#!/bin/bash

DIR=/home/letsencrypt
SCRIPT=letsencrypt-cert
USERNAME=letsencrypt

pushd $DIR
if [[ $USER != $USERNAME ]]; then
    sudo -H -u $USERNAME ./$SCRIPT
else
    ./$SCRIPT
fi
popd

if [ $? -eq 0 ]; then
    service nginx reload
    echo OK
else
    echo FAIL
fi