su - root

systemctl stop nginx

letsencrypt renew

systemctl restart nginx