ok but i already have a nice setup with nginx and lego with dns challenge and wildcard certificates,,
i made https://github.com/lvxnull2/lego.sh which takes care of everything related to getting and renewing certificates and then its only a bit of boilerplate to get nginx to use them,,
