switched to fully self contained docker

deploy/nginx/templates/bootstrap.conf.template

@@ -0,0 +1,13 @@
+server {
+    listen 80;
+    server_name ${BROKER_DOMAIN} ${GITEA_DOMAIN};
+
+    location /.well-known/acme-challenge/ {
+        root /var/www/certbot;
+    }
+
+    location / {
+        return 503 "TLS setup is in progress.\n";
+        add_header Content-Type text/plain;
+    }
+}