Automate SSL renewal

[adamduren]

letsencrypt certs expire every three months. They can be automated with certbot. We'll need a cron task that runs the update command as well as some changes to our nginx config to allow the certbot to interact with the domain verification service.