i also think the second way is better as it means you get practice at configuring LetsEncrypt certs early