i fixed certbot because it was spamming root@ with renew failures

root@tilde:/etc/letsencrypt/renewal# mv tilde.town.conf tilde.town.conf.disabled
root@tilde:/etc/letsencrypt/renewal# mv cgi.tilde.town.conf cgi.tilde.town.conf.disabled

the "tilde.town" cert is misleading, as it was actually used for cgi.tilde.town too, which now doesn't resolve to anything
we use "tilde.town-0001" now iirc
both those certs are useless but certbot was complaining about them not renewing so i just disabled them
yeah