See https://fl1tzi.com/2023/10/04/nginx-certbot-renewal.html