How I use docker and a simple shell script to renew my ssl certs. Nginx docker and site.conf example of how certs are processed and saved

create_certs.sh

#!/bin/bash

docker-compose -f ../certbot/docker-compose.yml --env-file ../certbot/openbracket.ca.env up 
docker-compose -f ../certbot/docker-compose.yml --env-file ../certbot/pass.openbracket.ca.env up
docker-compose -f ../certbot/docker-compose.yml --env-file ../certbot/social.openbracket.ca.env up
docker-compose -f ../certbot/docker-compose.yml --env-file ../certbot/git.openbracket.ca.env up
docker-compose -f ../certbot/docker-compose.yml --env-file ../certbot/design.openbracket.ca.env up

docker-compose.yml

version: '3.5'

services:
  certbot:
     image: certbot/certbot:latest
     container_name: certbot
     command: >
         certonly --webroot --noninteractive --agree-tos
         --webroot-path=/var/www/certbot
         --preferred-challenges http
         --email $EMAIL
         -d $DOMAIN
         --dry-run
     volumes:
       - ./etc/letsencrypt:/etc/letsencrypt
       - ./www:/var/www/certbot
     networks:
        - openbracket

networks:
  openbracket:
    name: openbracket
    external: true

nginx-site.conf

server {
  listen 80;
  server_name openbracket.ca;

  location /.well-known/acme-challenge/ {
    root /var/www/certbot;
  }

  location / {
    return 301 https://$server_name$request_uri;
  }
}

nginx.docker-compose.yml

version: '3.5'

services:
  nginx:
    image: nginx:latest
    container_name: nginx
    restart: always
    ports:
      - '80:80'
      - '443:443'
    volumes:
      - ../certbot/etc/letsencrypt:/etc/letsencrypt
      - ../certbot/www:/var/www/certbot
      - ./etc/nginx:/etc/nginx
      - ./static:/var/www
    networks: 
      - openbracket

networks:
  openbracket:
    name: openbracket
    external: true