Clone Git repo:
sudo git clone https://github.com/letsencrypt/letsencrypt /opt/letsencrypt
than:
cd /opt/letsencrypt
Generate apache config and certs:
./letsencrypt-auto --apache -d example.com
or with subdomain
./letsencrypt-auto --apache -d example.com -d www.example.com
lets test it:
https://www.ssllabs.com/ssltest/analyze.html?d=example.com&latest
Enable auto renewal:
./letsencrypt-auto renew
output be similar like this:
Checking for new version... Requesting root privileges to run letsencrypt... /root/.local/share/letsencrypt/bin/letsencrypt renew Processing /etc/letsencrypt/renewal/example.com.conf The following certs are not due for renewal yet: /etc/letsencrypt/live/example.com/fullchain.pem (skipped) No renewals were attempted.
add it to crontab:
sudo crontab -e
add a line:
30 2 * * 1 /opt/letsencrypt/letsencrypt-auto renew >> /var/log/le-renew.log