Looks good.
Just do a quick check in /etc/letsencrypt and under /opt to ensure everything is being saved into /etc/letsencrypt. I don't think Certbot can be installed with a different default (under /opt) and you must invoke it with alternate paths, but I am not sure.