[hotfix] update splash letsencrypt settings
- in LE v
2.0.2
(nowlatest
) it expects to store certs in/etc/acme.sh
, which means that unless we mount that volume, they will be created in anonymous volumes and forgotten every time we reboot, causing LE to request new certs every reboot, and eventually rate limit our domain. (oh noes!) - this MR mounts a named volume to persist the certs and pins our version of LE to prevent future breaking changes