This is what I use because fuck snap. I used certbot to do wild card certs but once they went to snap I quit.