Install Certbot and register Let's Encrypt account:
add-apt-repository ppa:certbot/certbot
apt update
apt install certbot
certbot register
Issue new SSL certificates for each host:
certbot certonly --webroot -w /var/www/alexhunt.io/ -d alexhunt.io -d www.alexhunt.io
Add a new Cron entry for renewals:
@daily certbot renew --post-hook "nginx -s reload" 2>> /var/log/certbot.log
certbot renew
references all pre-obtained certificates and will skip any with more than 30 days remaining before expiry.