cp xyzzy.fi.conf.bootstrap \
  /etc/nginx/sites-available/xyzzy.fi.conf

cd /etc/nginx/sites-enabled
ln -s /etc/nginx/sites-available/xyzzy.fi.conf 01xyzzy.fi.conf
cd -

nginx -t
systemctl restart nginx

certbot --nginx -d xyzzy.fi,www.xyzzy.fi \
  --agree-tos -m "hostmaster@xyzzy.fi" --no-eff-email \
  --deploy-hook "systemctl reload nginx"

cp xyzzy.fi.conf /etc/nginx/sites-available/xyzzy.fi.conf

nginx -t
systemctl restart nginx