add 2nd website server

certbot-replicate

@@ -0,0 +1,17 @@
+#!/bin/bash
+
+set -o errexit -o nounset -o pipefail
+
+replicas=(
+    replica1.grapheneos.org
+)
+
+for replica in ${replicas[@]}; do
+    echo
+    echo Deploying to $replica
+    echo
+
+    rsync -rptvl --progress --delete /etc/letsencrypt/ $replica:/etc/letsencrypt
+    rsync -rptvl --progress --delete /etc/nginx/ocsp-cache/ $replica:/etc/nginx/ocsp-cache
+    ssh root@$replica nginx -s reload
+done