Let’s Encrypt cronjob script

cron-renew.sh

#!/bin/bash
#
SERVER="https://acme-v01.api.letsencrypt.org/directory"
EMAIL="[email protected]"
DOMAINS=("example.com" "example2.com" "example3.com")
WEBROOT=/tmp/letsencrypt/www

for DOMAIN in "${DOMAINS[@]}"
do
    mkdir -p $WEBROOT
    letsencrypt certonly \
        --authenticator webroot --webroot-path $WEBROOT \
        -d $DOMAIN -d www.$DOMAIN \
        --server $SERVER --email $EMAIL \
        --agree-tos --renew-by-default
done

systemctl restart nginx

example.com.conf

server {
    listen 80;
    listen [::]:80;

    server_name example.com www.example.com;

    location /.well-known/acme-challenge {
        root /tmp/letsencrypt/www;
    }

    location / {
        return 301 https://example.com$request_uri;
    }
}

// ...