certbot_package: letsencrypt
certbot_auto_renew_args: "--no-self-upgrade"