> I would really appreciate if someone has documented this extensively for docker compose Run `certbot certonly` on the host once to get the initial certs, and

> I would really appreciate if someone has documented this extensively for docker compose Run `certbot certonly` on the host once to get the initial certs, and choose the option to run a temporary server rather than using nginx. Then in `compose.yml` have a mapping from the host's certificates to the nginx container. That way, you don't have to touch your nginx config when setting up a new server. You can then use a certbot container to do the renewals. E.g. nginx: volumes: - /etc/letsencrypt:/etc/letsencrypt certbot: volumes: - /etc/letsencrypt:/etc/letsencrypt entrypoint: "/bin/sh -c 'trap exit TERM; while :; do certbot renew; sleep 12h & wait $${!}; done;'" In your nginx.conf you have ssl_certificate /etc/letsencrypt/live/$DOMAIN/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/$DOMAIN/privkey.pem; And also location /.well-known/ { alias /usr/share/nginx/html/.well-known/; } For the renewals.