In the words of Roy Trenneman.... Oh dear oh dear oh dear!

I.. Um. It's different now but I'm pretty sure certs still won't renew, and if they did haproxy wouldn't know about them.

I'm not sure what your motivation is for posting this article but honestly you need a better understanding before trying to give other people technical advice about something.

Edit: also the weirdness persists. Why are you allowing inbound dns requests. Why is your firewall blocking first instead of last. Why are you using sudo for curl that gets piped. Jesus why are you curl|bash at all. I'm pretty sure your cron job is unnecessary and won't even work.

<breathe>... There is still a lot wrong with this but I can't type easily so that will have to do for now