acme: installation checklist

Install acme-tiny (preferrable from Debian package)
Copy scripts to /usr/local/sbin
Create user acme as normal, not system user
create Let's Encrypt account key or copy existing one as ~acme/account.key
create ~acme/public.html and set its owner to user acme. Directory shoild be world-readable.
Configure your webserver to serve it as /.well-known/acme-challenge
Create empty configuration file /etc/acme-certs
run create_csr by hand as root. Use options --new, --service and --directory to create new request and add it to config file (see create_csr help)
run request_crt by hand as acme
run deploy_crt by hand as root
check if your services use correct certificate and key
Place crontab script as /etc/cron.d/acme-certs