apt install python3
apt install python3-pip

pip3 install certbot
pip3 install certbot-dns-cloudflare certbot-dnspod certbot-dns-aliyun

ln -s /usr/local/bin/certbot /usr/local/certbot

pip install --upgrade certbot-dnspod

certbot --version
certbot plugins

mkdir -p /home/certbot/config/

vim /home/certbot/config/cloudflare.ini

#这里填进你注册cloudflare的邮箱
dns_cloudflare_email = xxx
#这里粘贴刚才复制的Global API Key
dns_cloudflare_api_key = xxx

chmod 400 /home/certbot/config/cloudflare.ini

certbot certonly -d 'domain.com, *.domain.com' --agree-tos --email kefumails@gmail.com --server https://acme-v02.api.letsencrypt.org/directory --dns-cloudflare --dns-cloudflare-credentials /home/certbot/config/cloudflare.ini --dns-cloudflare-propagation-seconds 30

vim /home/sh/cp_all_cert.sh

#!/bin/bash
#
dir_path=/etc/letsencrypt/live

for file in $dir_path/*
do
    if test -d $file;then
        path=$file
        name_arr=(${name_arr[*]} ${path##*/})
    fi
done

#echo ${name_arr[@]}

for name in ${name_arr[@]}
#也可以写成for element in ${array[*]}
do
echo $name
`\cp -f /etc/letsencrypt/live/${name}/fullchain.pem /data/openresty/conf/conf.d/cert/${name}.pem`
`\cp -f /etc/letsencrypt/live/${name}/privkey.pem /data/openresty/conf/conf.d/cert/${name}.key`
done

chmod -R 775 /home/sh