git clone https://github.com/certbot/certbot /opt/letsencrypt
ln -s /opt/letsencrypt/certbot-auto /usr/bin/certbot
certbot certonly --expand --agree-tos --text --non-interactive \
--standalone \
--email [email protected] \
-d xxx.com.br
cat << EOF > /root/letsencrypt.sh
#!/bin/bash
certbot renew --no-self-upgrade
mv /etc/pve/local/pve-ssl.pem /root/
mv /etc/pve/local/pve-ssl.key /root/
mv /etc/pve/pve-root-ca.pem /root/
cp /etc/letsencrypt/live/pve01.lichti.com.br/fullchain.pem /etc/pve/local/pve-ssl.pem
cp /etc/letsencrypt/live/pve01.lichti.com.br/privkey.pem /etc/pve/local/pve-ssl.key
cp /etc/letsencrypt/live/pve01.lichti.com.br/chain.pem /etc/pve/pve-root-ca.pem
service pveproxy restart
service pvedaemon restart
EOF
chmod +x /root/letsencrypt.sh
echo '@daily /root/letsencrypt.sh' > /etc/cron.d/letsencrypt
/root/letsencrypt.sh