- use container-bound certificates by default - do not use separate certificate loading include
- actually create letsencrypt challenge directory - point default server-blocks to proper LE directory - fix access and error logging for LE requests - update server-block configuration comment headers
- remove test from filenames to avoid confusion - these are production-capable files