creating TLS using certbot

[JohnFawkes]

So I have a vps I use for a project i am apart of called Kometa. I host plausible and weblate on the vps. I do not have control over the domain name but there are records that are pointed the vps ip. Using nginx proxy manager I was able to create ssl certs by entering the email address associated with the domain name. However using npmplus I am no longer able to enter that email address and using the environmental variable ACME_EMAIL with that email still doesnt work. Heres the log from the cert creation.

2025-02-09 00:02:43,261:DEBUG:certbot._internal.main:certbot version: 3.1.0
2025-02-09 00:02:43,261:DEBUG:certbot._internal.main:Location of certbot entry point: /usr/local/bin/certbot
2025-02-09 00:02:43,261:DEBUG:certbot._internal.main:Arguments: ['--logs-dir', '/tmp/certbot-log', '--work-dir', '/tmp/certbot-work', '--config-dir', '/data/tls/certbot', '--config', '/etc/certbot.ini', '--agree-tos', '--non-interactive', '--no-eff-email', '--register-unsafely-without-email', '--cert-name', 'npm-13', '--domains', 'translations.kometa.wiki', '--server', 'https://acme-v02.api.letsencrypt.org/directory', '--authenticator', 'webroot', '--webroot-path', '/tmp/acme-challenge']
2025-02-09 00:02:43,262:DEBUG:certbot._internal.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#dns-cloudflare,PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
2025-02-09 00:02:43,273:DEBUG:certbot._internal.log:Root logging level set at 30
2025-02-09 00:02:43,273:DEBUG:certbot._internal.plugins.selection:Requested authenticator webroot and installer None
2025-02-09 00:02:43,273:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * webroot
Description: Saves the necessary validation files to a .well-known/acme-challenge/ directory within the nominated webroot path. A separate HTTP server must be running and serving files from the webroot path. HTTP challenge only (wildcards not supported).
Interfaces: Authenticator, Plugin
Entry point: EntryPoint(name='webroot', value='certbot._internal.plugins.webroot:Authenticator', group='certbot.plugins')
Initialized: <certbot._internal.plugins.webroot.Authenticator object at 0x7f2146e15940>
Prep: True
2025-02-09 00:02:43,274:DEBUG:certbot._internal.plugins.selection:Selected authenticator <certbot._internal.plugins.webroot.Authenticator object at 0x7f2146e15940> and installer None
2025-02-09 00:02:43,274:INFO:certbot._internal.plugins.selection:Plugins selected: Authenticator webroot, Installer None
2025-02-09 00:02:43,617:DEBUG:certbot._internal.log:Exiting abnormally:
Traceback (most recent call last):
  File "/usr/local/bin/certbot", line 8, in <module>
    sys.exit(main())
             ~~~~^^
  File "/usr/local/lib/python3.13/site-packages/certbot/main.py", line 19, in main
    return internal_main.main(cli_args)
           ~~~~~~~~~~~~~~~~~~^^^^^^^^^^
  File "/usr/local/lib/python3.13/site-packages/certbot/_internal/main.py", line 1873, in main
    return config.func(config, plugins)
           ~~~~~~~~~~~^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.13/site-packages/certbot/_internal/main.py", line 1561, in certonly
    le_client = _init_le_client(config, auth, installer)
  File "/usr/local/lib/python3.13/site-packages/certbot/_internal/main.py", line 833, in _init_le_client
    acc, acme = _determine_account(config)
                ~~~~~~~~~~~~~~~~~~^^^^^^^^
  File "/usr/local/lib/python3.13/site-packages/certbot/_internal/main.py", line 731, in _determine_account
    potential_acc = display_ops.choose_account(accounts)
  File "/usr/local/lib/python3.13/site-packages/certbot/display/ops.py", line 86, in choose_account
    code, index = display_util.menu("Please choose an account", labels, force_interactive=True)
                  ~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.13/site-packages/certbot/display/util.py", line 80, in menu
    return obj.get_display().menu(message, choices, default=default, cli_flag=cli_flag,
           ~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
                                  force_interactive=force_interactive)
                                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.13/site-packages/certbot/_internal/display/obj.py", line 471, in menu
    raise self._interaction_fail(message, cli_flag, "Choices: " + repr(choices))
certbot.errors.MissingCommandlineFlag: Missing command line flag or config entry for this setting:
Please choose an account
Choices: ['76e8fdf8c1fd@2024-08-05T11:28:04Z (4e45)', 'e4f754e3ab98@2023-03-21T23:16:50Z (1ead)']
2025-02-09 00:02:43,620:ERROR:certbot._internal.log:Missing command line flag or config entry for this setting:
Please choose an account
Choices: ['76e8fdf8c1fd@2024-08-05T11:28:04Z (4e45)', 'e4f754e3ab98@2023-03-21T23:16:50Z (1ead)']

I know I probably could just ask the teammate who controls the domain to give me an api token for dns challenge but figured I would start here in case theres some issue.

Thanks

[JohnFawkes]

I was able to get this working. It seems only one account with lets encrypt is supported. after wiping the install and using the email for the domain it worked. Kinda sucks that we can only use one email for lets encrypt

[Zoey2936]

why do you need multiple emails? certbot ignores them anyway since they are only used to first time register the acme account, as far as I know