The --webroot module for LetsEncrypt is as easy as pointing to /var/www.