This is a fairly simple task; Setup subdomain with domain provider Add www subdomain to nginx Run certbot for www subdomain