已失效

---

corntab -e

5 0 1 * * /opt/letsencrypt/letsencrypt-auto --config /etc/letsencrypt/webroot.ini -d <domain> certonly && sudo service nginx reload

/etc/letsencrypt/webroot.ini

rsa-key-size = 2048
authenticator = webroot
webroot-path = /opt/letsencrypt
renew-by-default = True
agree-tos = True
email = any@email.com

nginx.conf

location /.well-known/ {root   /opt/letsencrypt/.well-known/;}