acme-cf.template.sh

# curl  https://get.acme.sh | sh

# https://dash.cloudflare.com/profile/api-tokens
export CF_Token="xxxxxx"
# https://dash.cloudflare.com/<account_id>
export CF_Account_ID="xxxxxx"
acme.sh --issue --dns dns_cf -d zthxxx.me -d '*.zthxxx.me'

mkdir -p /etc/nginx/ssl/zthxxx.me

acme.sh --installcert -d zthxxx.me \
  --fullchain-file /etc/nginx/ssl/zthxxx.me/fullchain.cer \
  --key-file /etc/nginx/ssl/zthxxx.me/privkey.key \
  --reloadcmd  "service nginx force-reload"