The requirement to open #Port 80 and 443 to everybody to make #Letsencrypt http-01 work is really bad one. Even I have most on #DNS01 things like #Yunohost wants http-01. But using the servers without the main firewalls block list is a heavy security risk .

Not good.....