What was this `--renew-by-default` nonsense? :P

scripts/run_certbot.sh

@@ -10,14 +10,14 @@ get_certificate() {
 
   local d=${CERT_DOMAINS//,*/} # read first domain
   echo "Getting certificate for $CERT_DOMAINS"
-  certbot certonly --agree-tos --renew-by-default -n \
+  certbot certonly --agree-tos --keep -n \
   --text --server https://acme-v01.api.letsencrypt.org/directory \
   --email $EMAIL -d $CERT_DOMAINS $args
   ec=$?
   echo "certbot exit code $ec"
   if [ $ec -eq 0 ]
   then
-    echo "Certificate obtained for $CERT_DOMAINS! Your new certificate - named $d - /etc/letsencrypt"
+    echo "Your new certificates for $CERT_DOMAINS can be found in /etc/letsencrypt/live/$d"
   else
     echo "Cerbot failed for $CERT_DOMAINS. Check the logs for details."
   fi