I shouldn't jinx it, but I think I finally fixed my @letsencrypt setup.