You need to be able to prove to Let's Encrypt that you control the domain name. That can be done by having Let's Encrypt connect to your site, or by setting a DNS TXT record. If you don't want to allow inbound connections to your site, you can look into the DNS TXT record option (called the DNS-01 challenge).
1 Like