sovereign/roles/sslletsencrypt/templates/etc_letsencrypt_cli.conf.j2

rsa-key-size = 4096
server = {{ letsencrypt_server }}
authenticator = standalone
register-unsafely-without-email = True
keep = True
expand = True
agree-tos = True
non-interactive = True

# Because we are using logrotate for greater flexibility, disable the
# internal certbot logrotation.
max-log-backups = 0