letsencrypt nginx redirect

crontab

# renew letsenrcypt cert
30 2 * * 1 /usr/bin/letsencrypt renew >> /var/log/le-renew.log
35 2 * * 1 /bin/systemctl reload nginx

letsencrypt_example.sh

letsencrypt certonly --webroot -w /workspace/letsencrypt/example.com -d example.com

nginx_example.conf

server {
    listen 80;
    server_name example.com;
    root /workspace/letsencrypt/example.com;
    location /.well-known {
    }
    location / {
        rewrite ^(.*)$ https://example.com$1 permanent;
    }
}