managing cert lifetimes is still a serious pita. I have considered switching to caddy just so I don’t have to think about systemd + letsencrypt restart logic. Never could get that working on my nixos machines.