Manual conf for LetsEncrypt on ClearOS with Apache

letsencrypt-renew

#!/bin/bash

#
# -rwxr-xr-x /etc/cron.daily/letsencrypt-renew
#

mkdir -p /var/www/letsencrypt

/usr/bin/certbot renew                \
    --agree-tos                       \
    --register-unsafely-without-email \
    --webroot                         \
    -w /var/www/letsencrypt

/usr/sbin/apachectl configtest          \
    && /usr/bin/systemctl restart httpd

letsencrypt.conf

#
# -rw-r--r-- /etc/httpd/conf.d/letsencrypt.conf
#

Alias /.well-known/acme-challenge/ "/var/www/letsencrypt/.well-known/acme-challenge/"
<Directory "/var/www/letsencrypt/">
    AllowOverride None
    Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
    Require method GET POST OPTIONS
</Directory>