diff --git a/linuxserver.io/letsencrypt.xml b/linuxserver.io/letsencrypt.xml
new file mode 100644
index 0000000..4f8b7f3
--- /dev/null
+++ b/linuxserver.io/letsencrypt.xml
@@ -0,0 +1,88 @@
+<?xml version="1.0"?>
+<Container version="2">
+  <Name>letsencrypt</Name>
+  <Changes>[center][img width='300px' src='https://raw.githubusercontent.com/linuxserver/docker-templates/master/linuxserver.io/img/linuxserver_small.png'][/center]
+
+  [center][font size=4]letsencrypt Change Log[/font][/center]
+  [font size=4]07-11-2016[/font]
+  - Initial release.
+  </Changes>
+  <Repository>linuxserver/letsencrypt</Repository>
+  <Registry>https://hub.docker.com/r/linuxserver/letsencrypt/</Registry>
+  <Network>bridge</Network>
+  <Privileged>true</Privileged>
+  <Support>http://lime-technology.com/forum/index.php?topic=53542.0</Support>
+  <Overview>This container sets up an Nginx webserver and reverse proxy with php support and a built-in letsencrypt client that automates free SSL server certificate generation and renewal processes. It also contains fail2ban for intrusion prevention.&#xD;
+  &#xD;
+  Before running this container, make sure that the url and subdomains are properly forwarded to this container's host.&#xD;
+  &#xD;
+  - Port 443 on the internet side of the router should be forwarded to this container's port 443.&#xD;
+  - If you need a dynamic dns provider, you can use the free provider duckdns.org where the url will be yoursubdomain.duckdns.org and the subdomains    can be www,ftp,cloud&#xD;
+  - The container detects changes to url and subdomains, revokes existing certs and generates new ones during start. &#xD;
+  - It also detects changes to the DHLEVEL parameter and replaces the dhparams file.&#xD;
+  &#xD;
+  - If you'd like to password protect your sites, you can use htpasswd. Run the following command on your host to generate the htpasswd file docker exec -it letsencrypt htpasswd -c /config/nginx/.htpasswd &amp;lt;username&amp;gt;</Overview>
+  <Description>Nginx webserver and reverse proxy with php support and a built-in letsencrypt client. It also contains fail2ban for intrusion prevention.</Description>
+  <Category>Tools: Network:Web Status:Stable</Category>
+  <WebUI>https://[IP]:[PORT:443]</WebUI>
+  <TemplateURL/>
+  <Icon>https://raw.githubusercontent.com/linuxserver/docker-templates/master/linuxserver.io/img/letsencrypt.png</Icon>
+  <ExtraParams/>
+  <Networking>
+    <Mode>bridge</Mode>
+    <Publish>
+      <Port>
+        <HostPort></HostPort>
+        <ContainerPort>80</ContainerPort>
+        <Protocol>tcp</Protocol>
+      </Port>
+      <Port>
+        <HostPort>443</HostPort>
+        <ContainerPort>443</ContainerPort>
+        <Protocol>tcp</Protocol>
+      </Port>
+    </Publish>
+  </Networking>
+  <Data>
+    <Volume>
+      <HostDir></HostDir>
+      <ContainerDir>/config</ContainerDir>
+      <Mode>rw</Mode>
+    </Volume>
+  </Data>
+  <Environment>
+    <Variable>
+      <Value/>
+      <Name>EMAIL</Name>
+      <Mode/>
+    </Variable>
+    <Variable>
+      <Value/>
+      <Name>URL</Name>
+      <Mode/>
+    </Variable>
+    <Variable>
+      <Value></Value>
+      <Name>SUBDOMAINS</Name>
+      <Mode/>
+    </Variable>
+    <Variable>
+      <Value>false</Value>
+      <Name>ONLY_SUBDOMAINS</Name>
+      <Mode/>
+    </Variable>
+    <Variable>
+      <Value>2048</Value>
+      <Name>DHLEVEL</Name>
+      <Mode/>
+    </Variable>
+  </Environment>
+  <Config Name="http" Target="80" Default="" Mode="tcp" Description="Container Port: 80" Type="Port" Display="always" Required="false" Mask="false">80</Config>
+  <Config Name="https" Target="443" Default="443" Mode="tcp" Description="Container Port: 443" Type="Port" Display="always" Required="false" Mask="false">443</Config>
+  <Config Name="Email" Target="EMAIL" Default="" Mode="" Description="Your e-mail address for cert registration" Type="Variable" Display="always" Required="false" Mask="false"/>
+  <Config Name="Domain Name" Target="URL" Default="" Mode="" Description="the top url you have control over customdomain.com if you own it, or customsubdomain.ddnsprovider.com if using dynamic dns)" Type="Variable" Display="always" Required="false" Mask="false"/>
+  <Config Name="Subdomain(s)" Target="SUBDOMAINS" Default="www," Mode="" Description="Subdomains you'd like the cert to cover (comma separated, no spaces) ie. www,ftp,cloud," Type="Variable" Display="always" Required="false" Mask="false">www,</Config>
+  <Config Name="AppData Config Path" Target="/config" Default="" Mode="rw" Description="Container Path: /config" Type="Path" Display="advanced-hide" Required="true" Mask="false"></Config>
+  <Config Name="Only Subdomains" Target="ONLY_SUBDOMAINS" Default="false" Mode="" Description="if you wish to get certs only for certain subdomains, but not the main domain (main domain may be hosted on another machine and cannot be validated), set this to true" Type="Variable" Display="always" Required="false" Mask="false">FALSE</Config>
+  <Config Name="Diffie Hellman" Target="DHLEVEL" Default="2048" Mode="" Description="Diffie Hellman parameters bit value.  Can be 1024, 2048 or 4096.  (Default is 2048)" Type="Variable" Display="always" Required="false" Mask="false">2048</Config>
+</Container>