I have three ubuntu servers running (mail.domain.com, web.domain.com, files.domain.com) on 3 different virtual servers. These are running on a physical ubuntu virtualization KVM server. I have certbot running on each server.
My question is: Is it possible to run a "certbot server" that would be dedicated to just renew the certs for all the different servers somehow?
To me the easiest method is to renew on a single server using DNS validation, stored the cert the use that cert (and private key) on your servers either by copying the files around or pulling them from a secrets storage service.
I do also have a certificate management service under development that's designed for these types of scenarios via https://certifytheweb.com but it's probably overkill for what you need.