The elegant solution will be automating it in
app.yml. Until that I’d say it’s acceptable in order to have it working properly. Is it sufficent to disable the Let’s Encrypt entries to avoid Discourse overwriting the certificate?
Do you or intend to run other services alongside?