Script for auto renew Let's Encrypt serts

acme-challenge

location /.well-known/acme-challenge/ {
  root /var/run/acme/acme-challenge/;
}

acme.conf

# nginx webroot for acme
server {
    server_name *.example.com;
    root /var/run/acme/acme-challenge;

    include acme-challenge;

    location / {
        return 301 https://$host$request_uri;
    }
}

get-cert.sh

#!/bin/bash
# RUN AS ROOT!

# sudo apt-get install letsencrypt

EMAIL=user@example.com
MAIN_DOMAIN=$1
SECOND_DOMAIN=$2

# certs will be placed under `/etc/letsencrypt/live/$MAIN_DOMAIN` directory
letsencrypt certonly -m $EMAIL --webroot -w /var/run/acme/acme-challenge -d $MAIN_DOMAIN -d $SECOND_DOMAIN

renew-letsencrypt.sh

#!/bin/bash
# RUN AS ROOT!

# sudo apt-get install letsencrypt

# mkdir -p /var/run/acme/acme-challenge
letsencrypt renew