Checklist:

• Setup a random IPv6 for the web server
• CAA record

To issue a certificate:

1. Set certificates in your server .conf to this:

   ssl_certificate /etc/nginx/snakeoil.pem;
   ssl_certificate_key /etc/nginx/snakeoil.key;
   

2. Issue the certificate:

   docker compose exec acme mkdir /etc/ssl/<domain>
   docker compose exec acme --issue --server letsencrypt -d <domain> --webroot /var/www/html/<domain>
   docker compose exec acme --install-cert -d <domain> --key-file /etc/ssl/<domain>/key.pem --fullchain-file /etc/ssl/<domain>/fullchain.pem
   

3. Set certificates in your server .conf to this:

   ssl_certificate /etc/ssl/<domain>/fullchain.pem;
   ssl_certificate_key /etc/ssl/<domain>/key.pem;
   

4. Restart nginx:

   docker compose exec nginx nginx -s reload
   

   You have to do this (or restart) every up to 3 months.