Am I risky anything when I modify "# managed by Certbot" webserver configuration lines?

[Osiris]

@MikeMcQ

I am nearly certain the renew command does not make permanent changes to your server config. @Osiris would know for certain about that.

It should not indeed.

@MikeMcQ

That said, your original command should work just fine with the automated renew.

And I'd recommend also testing this renewal by using the same renew command as planned plus the --dry-run option. Suddenly using certonly for no good reason only complicates things.