Renew Script for LetsEncrypt

certbot-renew.sh

#!/usr/bin/env bash

set -o errexit
set -o nounset

# Bash will remember & return the highest exitcode in a chain of pipes.
# This way you can catch the error in case mysqldump fails in `mysqldump |gzip`
set -o pipefail

PATH=/sbin:/bin:/usr/sbin:/usr/bin
# create new certs
for conf in $(ls /etc/letsencrypt/configs/*.conf); do
  /usr/local/sbin/certbot-auto --renew-by-default --config "$conf" certonly
done

# make sure nginx picks them up
service nginx reload

crontab

# Check every two months
0 0 1 1,3,5,7,9,11 * /bin/bash /root/scripts/certbot-renew.sh >> /var/log/letsencrypt.log 2>&1