sovereign/roles/common/templates/etc_letsencrypt_cli.conf.j2

rsa-key-size = 4096
server = {{ letsencrypt_server }}
authenticator = standalone
register-unsafely-without-email = True
keep = True
expand = True
agree-tos = True