Might want to check out swag from linuxserver.io

It's a docker/kubernetes container image with a working certbot client in it.

Surprisingly, It's sometimes easier to do big things.

For example: Do social security instead of tinkering around the edges of the existing retirement system.