Usage is quite simple, you need to create in your $HOME a directory called .acme and place there such a config.yml file in it with the following options:
# E-mail to use for the setup.
# This e-mail will receive expiration notices from Let's Encrypt.
email: [email protected]
# List of certificates to issue.
certificates:
# For each certificate, there are a few options.
#
# Required: paths
# Optional: bits, user
#
# paths: Map of document roots to domains.
# /tmp is used here for domains without a real document root.
# The client will place a file into $path/.well-known/acme-challenge/
# to verify ownership to the CA
#
# bits: Number of bits for the domain private key
#
# user: User running the web server. Challenge files are world readable,
# but some servers might require to be owner of files they serve.
#
- bits: 4096
paths:
/your/document/root/: your.domain.name.com
# or specify multiple domain names like this:
# paths:
# /your/document/root/: [your.domain.name.com, your.domain.name2.com]Then setup a cron job to run this command once a day:
cert-renew.sh production $HOME/nginx your.domain.name.com