web: use certbot-auto

web/rootfs/defaults/letsencrypt-renew

@@ -4,7 +4,7 @@
 s6-svc -d /var/run/s6/services/nginx
 
 # renew cert
-certbot -n renew >> /config/le-renew.log
+certbot-auto --no-self-upgrade -n renew >> /config/le-renew.log
 
 # start nginx
 s6-svc -u /var/run/s6/services/nginx

web/rootfs/etc/cont-init.d/10-config

@@ -11,7 +11,9 @@ mkdir -p \
 if [[ $DISABLE_HTTPS -ne 1 ]]; then
     if [[ $ENABLE_LETSENCRYPT -eq 1 ]]; then
         if [[ ! -f /etc/letsencrypt/live/$LETSENCRYPT_DOMAIN/fullchain.pem ]]; then
-            if ! certbot certonly \
+            if ! certbot-auto \
+                  certonly \
+                  --no-self-upgrade \
                   --noninteractive \
                   --standalone \
                   --preferred-challenges http \