There's a plugin for nginx that works well:

$ apt-get install python3-certbot-nginx

$ sudo certbot --nginx -d example.com -d www.example.com

https://www.nginx.com/blog/using-free-ssltls-certificates-fr...

On the other hand, caddy seems to auto renew them as well - one less cron job:

> Automatic HTTPS provisions TLS certificates for all your sites and keeps them renewed.

https://caddyserver.com/docs/automatic-https

Neat, but still not sold.

I never cared much for certbot because "sudo certbot" and it works by rewriting config files. I don't really fancy running it as root (which can probably be avoided with some muckery, but still) or a program automatically rewriting my configs.

Overall, the entire thing seems very complex automagic black box last time I tried it (already years ago). Sometimes trying to make something easier can make it harder.

certbot works with apache, if you're willing to spend that effort

What are you not sold on?