Installing a Let's Encrypt certificate for nginx

domain=renenyffenegger.ch
subdomain=…
servername=$subdomain.$domain
mailaddress=mail@$domain

sudo sh -c "echo 'server {
    listen 80;
    listen [::]:80;
    server_name $servername;
}' > /etc/nginx/conf.d/$servername.conf"

# sudo certbot -m $mailaddress --agree-tos --nginx -d $servername --test-cert
sudo   certbot -m $mailaddress --agree-tos --nginx -d $servername 

> Saving debug log to /var/log/letsencrypt/letsencrypt.log
> Requesting a certificate for ….renenyffenegger.ch
> 
> Successfully received certificate.
> Certificate is saved at: /etc/letsencrypt/live/….renenyffenegger.ch/fullchain.pem
> Key is saved at:         /etc/letsencrypt/live/….renenyffenegger.ch/privkey.pem
> This certificate expires on …
> These files will be updated when the certificate renews.
> Certbot has set up a scheduled task to automatically renew this certificate in the background.
> 
> Deploying certificate
> Successfully deployed certificate for ….renenyffenegger.ch to /etc/nginx/conf.d/….renenyffenegger.ch.conf
> Congratulations! You have successfully enabled HTTPS on https://….renenyffenegger.ch

location / {
   proxy_pass http://localhost:8888;
   proxy_set_header Host $host;
   proxy_set_header X-Real-IP $remote_addr;
   proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
   proxy_set_header X-Forwarded-Proto $scheme;
}