The dirs are subdirs of /srv/letsencrypt. I like to take advantage of explicit dir assignment if the software allows it, so I don’t have any surprises if the defaults change.

ROOT=/srv/letsencrypt
SECDIR="${ROOT}/secrets"
CFGDIR="${ROOT}/config"
LOGDIR="${ROOT}/logs"
TMPDIR="${ROOT}/tmp"

for DIR in "$SECDIR" "$CFGDIR" "$LOGDIR" "$TMPDIR"; do
        mkdir -p "$DIR"
done

cd "$ROOT"