CERTBOT 在 docker 容器中找不到配置文件

Question

两个月前，借助 Let's Encrypt，我建立了一个带有 SSL 的网站。我是如何做到这一点的细节现在已经相当模糊了。

该站点托管在多个 docker 容器（nginx、PHP、MySQL）内。有一个 certbot 容器应该执行 SSL 证书的更新。该容器每周启动一次并立即中止。

我检查了日志并发现了这个错误。我的研究不成功，我不知道 certbot 抱怨什么文件。

usage:
  certbot [SUBCOMMAND] [options] [-d DOMAIN] [-d DOMAIN] ...

Certbot can obtain and install HTTPS/TLS/SSL certificates.  By default,
it will attempt to use a webserver both for obtaining and installing the
certificate.
certbot: error: Unable to open config file: certonly -n --webroot --webroot-path=/var/lib/challenge --email contact@**********.com --agree-tos --no-eff-email -d www.**********.com --key-type ecdsa. Error: No such file or directory

你知道这个问题吗？ 提前致谢，

编辑： /etc/letsencrypt 的内容在

accounts       archive        cli.ini        csr            keys           live           renewal        renewal-hooks

cli.ini 内部，我有：

key-type = ecdsa
elliptic-curve = secp384r1
rsa-key-size = 4096
email = [email protected]
authenticator = webroot
webroot-path = /var/lib/challenge
agree-tos = true

docker-compose.yml 包含：

version: '3'

services:

    nginx:
        build: ./nginx
        container_name: nginx
        restart: unless-stopped
        depends_on:
          - php
        networks:
            - app-network
        volumes:
            - {{ mounted_dir_app }}/public:/var/www/html:ro
            - certbotdata:/etc/letsencrypt:ro
            - challenge:/home/challenge
        ports:
            - "80:80"
            - "443:443"
        env_file:
            - .env
            - ".env.$ENV"
        healthcheck:
            test: curl -IsLk $$SITE_URL | head -n 1 | grep -q -e ^HTTP -e 200
            start_period: 30s
            interval: 10s
            timeout: 3s
            retries: 5

    php:
        #skip

    mysql:
        #skip

    certbot:
        depends_on:
            nginx:
                condition: service_healthy
        build: 
            context: ./certbot
            args:
                - "ENV=$ENV"
        container_name: certbot
        env_file:
            - .env
            - ".env.$ENV"
        volumes:
            - certbotdata:/etc/letsencrypt
            - challenge:/var/lib/challenge

networks:
    app-network:
        driver: bridge

volumes:
    dbdata:
    certbotdata:
    challenge:

编辑： CERTBOT Dockerfile 是

ARG ENV

FROM certbot/certbot as cert-prod
CMD  certonly -n --webroot --webroot-path=/var/lib/challenge --email contact@**********.com --agree-tos --no-eff-email -d www.**********.com --key-type ecdsa

FROM alpine as cert-dev
RUN apk update && apk add openssl
CMD mkdir -p /etc/letsencrypt/live/www.**********.com          && \
    openssl req -x509 -nodes -days 365 -newkey rsa:2048     \
    -subj "/C=**/ST=**********/L=**********"            \
    -keyout /etc/letsencrypt/live/www.**********.com/privkey.pem -out /etc/letsencrypt/live/www.**********.com/fullchain.pem

FROM cert-${ENV}