Howto: easy cert generation and renewal with nginx