letsencrypt_renew.sh

#!/bin/bash

EMAIL="[email protected]"
LEGOROOT="/path/to/lego"

function renew {
    domain="$1"
    path="$2"

    $LEGOROOT/lego --key-type rsa4096 --accept-tos --path "$LEGOROOT/.lego" --email "$EMAIL" \
    --webroot "$path" --domains "$domain" --domains "www.$domain" \
    renew 1>> "$LEGOROOT/renew.log" 2>&1
    ret=$?

    if [ $ret -eq 0 ]; then
        cp "$LEGOROOT/.lego/certificates/$domain.crt" /etc/nginx/ssl/lego/
        chown root:root "/etc/nginx/ssl/lego/$domain.crt"
        cp "$LEGOROOT/.lego/certificates/$domain.key" /etc/nginx/ssl/lego/
        chown root:root "/etc/nginx/ssl/lego/$domain.key"
        echo -e "$domain was renewed.\n" >> "$LEGOROOT/renew.log"
    else
        echo -e "$domain failed to renew!\n" >> "$LEGOROOT/renew.log"
    fi
}

renew www.domain.1" "/path/to/static1"
renew "www.domain.2" "/path/to/static2"
service nginx restart