Wiki/kimsufi-private-cloud/letsencrypt.md

sudo apt install letsencrypt
sudo letsencrypt certonly --webroot -w /var/www/html -d kim.truh.in -d mtx.truh.in
sudo letsencrypt certonly --webroot -w /var/www -d git.truh.in
sudo letsencrypt certonly --webroot -w /var/www -d webtech.truh.in
sudo letsencrypt certonly --webroot -w /var/www -d znc.truh.in
sudo letsencrypt certonly --webroot -w /var/www -d youtrack.truh.in
sudo letsencrypt certonly --webroot -w /var/www -d obs.truh.in
sudo letsencrypt certonly --webroot -w /var/www -d vital.webtech.truh.in

IMPORTANT NOTES:
 - If you lose your account credentials, you can recover through
   e-mails sent to jakob-letsencrypt@truh.in.
 - Congratulations! Your certificate and chain have been saved at
   /etc/letsencrypt/live/kim.truh.in/fullchain.pem. Your cert will
   expire on 2017-04-25. To obtain a new version of the certificate in
   the future, simply run Let's Encrypt again.
 - Your account credentials have been saved in your Let's Encrypt
   configuration directory at /etc/letsencrypt. You should make a
   secure backup of this folder now. This configuration directory will
   also contain certificates and private keys obtained by Let's
   Encrypt so making regular backups of this folder is ideal.
 - If you like Let's Encrypt, please consider supporting our work by:

   Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
   Donating to EFF:                    https://eff.org/donate-le

events {
  worker_connections 1024;
}

http {
  server {
    listen 80;

    listen 443 ssl;
    server_name kim.truh.in;
    ssl_certificate /etc/letsencrypt/live/kim.truh.in/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/kim.truh.in/privkey.pem;

    root /var/www;
  }

  server {
    listen 80;

    listen 443 ssl;
    server_name mtx.truh.in;
    ssl_certificate /etc/letsencrypt/live/kim.truh.in/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/kim.truh.in/privkey.pem;

    location / {
      proxy_pass http://192.168.122.178:8008;
    }

    location .well-known/acme-challenge/ {
      root /var/www/.well-known/acme-challenge;
    }
  }
}