Highly recommend webroot mode with something similar to this[1]. Put that into a cronjob together with service nginx reload and automated zero-downtime renewal

Highly recommend webroot mode with something similar to this[1]. Put that into a cronjob together with service nginx reload and automated zero-downtime renewal is up and running. [1]: https://community.letsencrypt.org/t/using-the-webroot-domain-verification-method/1445/7?u=pfg https://community.letsencrypt.org/t/using-the-webroot-domain...