#!/bin/sh

cd /home/pi/WWW
sudo systemctl stop lighttpd
echo 2 | sudo certbot certonly --standalone -d your-site-name-here.com -d www.your-site-name-here.com

# sudo cat /etc/letsencrypt/live/your-site-name-here.com/privkey.pem /etc/letsencrypt/live/your-site-name-here.com/fullchain.pem > /etc/letsencrypt/live/your-site-name-here.com/combined.pem
sudo cat /etc/letsencrypt/live/your-site-name-here.com/privkey.pem /etc/letsencrypt/live/your-site-name-here.com/cert.pem | sudo dd of=/etc/letsencrypt/live/your-site-name-here.com/combined.pem

sudo chown :www-data /etc/letsencrypt
sudo chown :www-data /etc/letsencrypt/live
sudo chown :www-data /etc/letsencrypt/archive
sudo chmod g+x /etc/letsencrypt
sudo chmod g+x /etc/letsencrypt/live
sudo chmod g+x /etc/letsencrypt/archive

sudo -u www-data file -L /etc/letsencrypt/live/your-site-name-here.com/cert.pem

sudo systemctl start lighttpd