letsencrypt.sh

#!/usr/bin/env sh
#
# Don't forget to:
# 1. make `/etc/letsencrypt` persistent
# 2. share `/tmp/letsencrypt` as `http://example.com/.well-known`
#
set -e
set -x

which certbot-auto || (
    curl -SL -o /tmp/certbot-auto https://dl.eff.org/certbot-auto
    mv /tmp/certbot-auto /usr/local/bin/certbot-auto
    chown root /usr/local/bin/certbot-auto
    chmod 0755 /usr/local/bin/certbot-auto
)

mkdir /tmp/letsencrypt || true

/usr/local/bin/certbot-auto certonly \
    --non-interactive \
    --webroot \
    --webroot-path /tmp/letsencrypt \
    --agree-tos \
    --register-unsafely-without-email\
    $*