Letsencrypt Certbot New Certificate for Nginx

letsencrypt-nginx.txt

# from https://www.digitalocean.com/community/tutorials/how-to-secure-nginx-with-let-s-encrypt-on-ubuntu-14-04

# add to nginx server config
location ~ /.well-known {
  root /usr/share/nginx/html;
  allow all;
}

ssl_certificate_key  /etc/letsencrypt/live/www.domain.com/privkey.pem;
ssl_certificate      /etc/letsencrypt/live/www.domain.co/fullchain.pem;
ssl_trusted_certificate /etc/letsencrypt/live/www.domain.co/fullchain.pem; # certificate for OCSP stapling

# request certificate
./certbot-auto certonly -a webroot --webroot-path=/usr/share/nginx/html -d domain.com -d www.domain.com

# test renew 
./certbot-auto renew --dry-run

# renew
./certbot-auto renew --post-hook "service nginx reload"

# add cronjob
# add logrotate