letsencrypt-renew.sh

#!/bin/bash

#
# Update SSL certs with letsencrypt
#

LE_HOME=/usr/src/letsencrypt

# stop nginx temporarily
echo "Stopping nginx"
systemctl stop nginx

# write cert to /etc/letsencrypt/live/my.domain.com/
$LE_HOME/letsencrypt-auto certonly \
        --standalone \
        --standalone-supported-challenges tls-sni-01 \
        --renew-by-default \
        -d my.domain.com

EXIT_CODE=0
if [[ $? -ne 0 ]]; then
        echo "Failed to generate new SSL cert"
        EXIT_CODE=1
fi

echo "Starting nginx"
systemctl start nginx
exit $EXIT_CODE