I’m not sure this is correct instruction. You should reference the live certificate data in your soju config, and also ensure that certbot can renew the certificates automatically.