Letencrypt

1. Download

git clone https://github.com/letsencrypt/letsencrypt /opt/letsencrypt

Clone letencrypt from git repo

2. Create new SSL domain

service nginx stop

You can stop nginx before create new ssl domain

/opt/letsencrypt/certbot-auto certonly --standalone

Enter email, access rule, domain and ssl certificate create in/etc/letsencrypt/live.

3. Automatic renew

EDITOR=nano crontab -e

30 2 * * * /opt/letsencrypt/certbot-auto renew --pre-hook "service nginx stop" --post-hook "service nginx start" >> /var/log/le-renew.log

Message success crontabcrontab: installing new crontab