[SOLVED] How letsencrypt works exactly?

webroot is probably the most compatible method at the moment, yes, especially if you don’t want to take down your site temporarily to let the client listen on port 80/443. It might still be necessary to change some parts of your config, for example a lot of people do not serve dot-files by default as a best practise, but it’s definitely less involved than other options.