Tushar Deo tusharvikky

How to setup Let's Encrypt for Nginx on Ubuntu 16.04 (including IPv6, HTTP/2 and A+ SLL rating)

There are two main modes to run the Let's Encrypt client (called Certbot):

Webroot is better because it doesn't need to replace Nginx (to bind to port 80).

In the following, we're setting up mydomain.com. HTML is served from /var/www/mydomain, and challenges are served from /var/www/letsencrypt.

	#!/bin/bash
	#================================================================
	# Let's Encrypt renewal script for Nginx based on the script
	# by Erika Heidi for Apache on Ubuntu/Debian
	# @author Erika Heidi<[email protected]>
	# @author Bjørn Johansen <[email protected]>
	# Usage: ./le-renew.sh [base-domain-name] [path-to-webroot]
	#================================================================
	domain=$1
	webroot=$2

	@servers(['staging' => '[email protected]', 'production' => '[email protected]'])

	<?php

	$app_name = 'l5eka';
	$app_path = '/var/www/vhosts/'.$app_name;
	$repo = 'https://github.com/vedovelli/l5eka';
	$branch = 'aula4';
	$github_token = ''; // GitHub OAuth token
	$server_name = '192.168.0.99'; // IP ou domínio válido. Usado no nginx