starting to think i might have to write a fuckin DNS server for smoother letsencrypt cert checks (in this convoluted network setup part)