Generate LetsEncrypt certs instead of self signed during install

[slntopp]

No description provided.

[slntopp]

As an example

#!/bin/bash

d1=ssl.example.com
d2=ssl1.example.com
d3=ssl2.example.com
tmpdir="/var/www/letsecrypt"
nginxconf="/etc/nginx/conf.d/example.com.conf"
RSA=/etc/one/ssl/example.com.key
CRT=/etc/one/ssl/example.com.crt
LOG=/root/.acme.sh/acme.sh.log

function configureNginx {

mkdir -p $tmpdir
echo "CONFIGURE NGINX" >> $LOG
\mv $nginxconf "${nginxconf}_backup"

cat << EOF > $nginxconf
server {
        listen                  80;
        server_name             $d1 $d2 $d3;
        root                    $tmpdir;
        location / {
                index index.html;
        }
}
EOF

sleep 1
systemctl restart nginx.service
sleep 1
echo "ISSUE CERT" >> $LOG
/root/.acme.sh/acme.sh --issue -d $d1 -d $d2 -d $d3 -w $tmpdir --force >> $LOG &>>$LOG
\mv "${nginxconf}_backup" $nginxconf
\cp /root/.acme.sh/$d1/$d1.key $RSA
\cp /root/.acme.sh/$d1/fullchain.cer $CRT
sleep 1
systemctl restart nginx.service

}

/usr/sbin/nginx -t 2>/dev/null > /dev/null
if [[ $? == 0 ]]; then
echo "START LE" >> $LOG
configureNginx
echo "FINISH LE" >> $LOG
else
 echo "nginx fail" >> $LOG
fi