https://certbot.eff.org/instructions?ws=nginx&os=snap
certbot --nginx
自动续期
certbot renew --pre-hook "systemctl stop nginx" --post-hook "systemctl start nginx"
