certbot webroot flow

certbot_webroot_flow.txt

mkdir path/to/frontend
mkdir path/to/backend

add to /etc/nginx/sites-enabled/frontend

 server {
   location ~ /.well-known {
     allow all;
     default_type "text/plain";
     root path/to/frontend;
   }
 } 
  
add to /etc/nginx/sites-enabled/backend

 server {
   location ~ /.well-known {
     allow all;
     default_type "text/plain";
     root path/to/backend;
   }
 }

sudo nginx -t
sudo service nginx restart

sudo certbot certonly --webroot -w path/to/frontend -d example.com -w path/to/backend -d api.example.com
check if everything is ok with certbot renew use this command: sudo certbot renew --dry-run