0.4.2

Added

• An opt-in Certbot deploy hook in DEB/RPM packages that validates and atomically
  publishes a restricted PEM bundle for automatic TLS certificate reloads.
• A Let's Encrypt webroot setup guide covering first issuance, service
  permissions, and unattended renewal.

Full Changelog: v0.4.1...v0.4.2