certbot: autorenew with nginx and webroot

step 1: add to crontab¹⁾

0 12 * * * /usr/bin/certbot renew --quiet

step 2: add renewal hook to restart nginx for the new certificate²⁾

/etc/letsencrypt/cli.ini

deploy-hook = systemctl reload nginx

¹⁾

from https://www.nginx.com/blog/using-free-ssltls-certificates-from-lets-encrypt-with-nginx/

²⁾

from https://blog.arnonerba.com/2019/01/lets-encrypt-how-to-automatically-restart-nginx-with-certbot