There are a few issues with that community how-to:
- The Certbot PPA has been DEPRECATED;
- Using the
acme-dns.io
instance is discouraged, as you are effectively authorizing the acme-dns server to act on your behalf in providing the answer to the challenging CA, making the instance able to request (and get issued) a TLS certificate for the domain that has CNAME pointing to it. (Source: GitHub - joohoi/acme-dns: Limited DNS server with RESTful HTTP API to handle ACME DNS challenges easily and securely.) You're encouraged to run your own instance ofacme-dns
for safety reasons.