# mkdir -p /etc/ssl/example.com
# sudo -Hu acme -g acme acme.sh --issue -d example.com --stateless
# acme.sh --home /var/db/acme/.acme.sh/ --install-cert -d example.com \
- --key-file /etc/ssl/example.com/key.pem
+ --ca-file /etc/ssl/example.com/ca.pem \
+ --key-file /etc/ssl/example.com/key.pem \
+ --cert-file /etc/ssl/example.com/cert.pem \
--fullchain-file /etc/ssl/example.com/fullchain.pem
```
-Let's add auto-renewal to `/etc/daily.local`
+Let's add auto-renewal to `/etc/crontab`
(replace `example.com` with your domain):
```
-/usr/local/bin/sudo -Hu acme -g acme \
- /usr/local/sbin/acme.sh -r \
- -d example.com \
- --cert-file /etc/nginx/tls/cert \
- --key-file /etc/nginx/tls/key \
- --ca-file /etc/nginx/tls/ca \
- --fullchain-file /etc/nginx/tls/fullchain \
- --stateless
+/usr/local/bin/sudo -Hu acme -g acme /usr/local/sbin/acme.sh -r -d example.com --stateless
+/usr/local/sbin/acme.sh --home /var/db/acme/.acme.sh/ --install-cert -d example.com \
+ --ca-file /etc/ssl/example.com/ca.pem \
+ --key-file /etc/ssl/example.com/key.pem \
+ --cert-file /etc/ssl/test-app.mailchar.com/cert.pem \
+ --fullchain-file /etc/ssl/example.com/fullchain.pem
```
### Configuring nginx