I’m with nginx, and I need to stop and start the service every time I need to renew/issue, so I would like to use --webroot, but I have differents paths and apps for every domain, eg: domain.com and www.domain.com are in /var/www/domain but blog.domain.com is on /var/www/blog .It’s possible to have anyway one certificate for all the domains? what would be the drawbacks? the command would be like this:
@punchi, what you describe should work properly in the way you’ve described it, except that you need to add another -w for the domains using a different domain, like
why should I separate into differents webroots if I could point all the SSL certificates paths to the same one?? and they’ll be created on /etc/letsencrypt/live/ ??
The webroot is used for authenticating your control over each domain, so it needs to match where the content of each site is served from – because the webroot plugin is going to change that content as part of the authentication process. If you have three different sites with different content, you need to supply three different -w values so that Certbot knows where to make the changes in response to the challenges associated with each domain.
