LetsEncrypt SSL Certificates

To regularely renew all certificates from LetsEncrypt on all hosts, execute this:

ascr role letsencrypt --tags=renew

If you're running services on a host that need to be paused while renewing, add them to a list in the letsencrypt_pause_services variable.