How to automatically renew certificates?

should be

renew-by-default = True