Certbot webroot with docker

default.conf

# nginx configuration

server {
  listen 80;
  
  location /.well-known/acme-challenge/ {
    root /var/www/letsencrypt;
  }
  
  ...
}

...

generate.sh

docker run -it --rm --name cerbot \
  -v "/etc/letsencrypt:/etc/letsencrypt" \
  -v "/var/www/letsencrypt:/var/www/letsencrypt" \
  # https://eff-certbot.readthedocs.io/en/stable/using.html#webroot
  certbot/certbot certonly --webroot -v\
  -m your@email.com \
  -w /var/www/letsencrypt \
  -d your.domain.com

ls /etc/letsencrypt/live
# Then, update nginx with your domian:
# server {
#     listen 443 ssl;
#     ....
#     ssl_certificate /etc/letsencrypt/live/your.domain.com/fullchain.pem;
#     ssl_certificate_key /etc/letsencrypt/live/your.domain.com/key.pem;
#     ....
# }

# Don't forget to reload nginx
# service nginx reload

renew.sh

docker run -it --rm --name cerbot \
  -v "/etc/letsencrypt:/etc/letsencrypt" \
  -v "/var/www/letsencrypt:/var/www/letsencrypt" \
  # https://eff-certbot.readthedocs.io/en/stable/using.html#webroot
  certbot/certbot renew
  
# Don't forget to reload nginx
service nginx reload