I've been working on a script that does this within Nginx. See https://github.com/torhve/lua-resty-letsencrypt

It's not quite production ready but it shows you it's technically possible