====== certbot: autorenew with nginx and webroot ======

step 1: add to crontab((from https://www.nginx.com/blog/using-free-ssltls-certificates-from-lets-encrypt-with-nginx/))

<file . crontab -e>
0 12 * * * /usr/bin/certbot renew --quiet
</file>

step 2: add renewal hook to restart nginx for the new certificate((from https://blog.arnonerba.com/2019/01/lets-encrypt-how-to-automatically-restart-nginx-with-certbot))

<file ini /etc/letsencrypt/cli.ini>
deploy-hook = systemctl reload nginx
</file>