Script to generate the SSL certificate via Letsencrypt

letsencrypt.sh

#!/bin/sh

if [ ! -d "/opt/letsencrypt" ]
then
        sudo git clone https://github.com/letsencrypt/letsencrypt /opt/letsencrypt
fi

if [ ! -f "/etc/nginx/snippets/letsencrypt.conf" ]
then
        echo "location '/.well-known/acme-challenge' {\n        default_type 'text/plain';\n        root /tmp/letsencrypt;\n}" | sudo tee /etc/nginx/snippets/letsencrypt.conf 
fi

echo "\nAdd this snippet to your nginx site config:"
echo "include snippets/letsencrypt.conf;\n"
read -p "Done?" v
sudo service nginx restart

sudo rm -fR /tmp/letsencrypt && sudo mkdir /tmp/letsencrypt && sudo /opt/letsencrypt/certbot-auto certonly --webroot -w /tmp/letsencrypt -d $1

echo "If it worked, you can add this snippet to your nginx site config:"

echo "
        listen 443 ssl http2;
        ...
        ssl on;
        ssl_certificate /etc/letsencrypt/live/$1/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/$1/privkey.pem;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers on;
        ssl_ciphers AESGCM:HIGH:!aNULL:!MD5;"

echo "\n"