Add Let's Encrypt Certificate throws certbot: error: unrecognized arguments using DNS Challenge provider Netcup

[sepperlot]

Checklist

• Have you pulled and found the error with jc21/nginx-proxy-manager:latest docker image?
  • Yes / No - not using docker!?
• Are you sure you're not using someone else's docker image?
  • Yes
• Have you searched for similar issues (both open and closed)?
  • Yes

Describe the bug
Trying to add a Let's Encrypt SSL certificate for home.mydomain.tld as well as *.home.mydomain.tld via DNS Challenge and Netcup as domain and DNS provider.

Adding a SSL cert using the GUI I receive below error

CommandError: usage: 
  certbot [SUBCOMMAND] [options] [-d DOMAIN] [-d DOMAIN] ...

Certbot can obtain and install HTTPS/TLS/SSL certificates.  By default,
it will attempt to use a webserver both for obtaining and installing the
certificate. 
certbot: error: unrecognized arguments: --dns-netcup-credentials /etc/letsencrypt/credentials/credentials-20 --dns-netcup-propagation-seconds 900

    at /app/lib/utils.js:16:13
    at ChildProcess.exithandler (node:child_process:410:5)
    at ChildProcess.emit (node:events:513:28)
    at maybeClose (node:internal/child_process:1100:16)
    at Process.ChildProcess._handle.onexit (node:internal/child_process:304:5)

However when running in CLI it just works. Takes forever because Netcup has slow DNS propagation but it works

(certbot) root@nginxproxymanager:/opt/certbot# certbot certonly --authenticator dns-netcup --dns-netcup-credentials /root/.netcup-credentials.ini --dns-netcup-propagation-seconds 900 --rsa-key-size 4096 -d home.mydomain.tld -d \*.home.mydomain.tld
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Requesting a certificate for home.mydomain.tld and *.home.mydomain.tld
Unsafe permissions on credentials configuration file: /root/.netcup-credentials.ini
Waiting 900 seconds for DNS changes to propagate

Successfully received certificate.
Certificate is saved at: /etc/letsencrypt/live/home.mydomain.tld/fullchain.pem
Key is saved at:         /etc/letsencrypt/live/home.mydomain.tld/privkey.pem
This certificate expires on 2025-09-01.
These files will be updated when the certificate renews.
Certbot has set up a scheduled task to automatically renew this certificate in the background.

Nginx Proxy Manager Version
v2.12.3

To Reproduce
Steps to reproduce the behavior:

1. Go to SSL Certificates
2. Click on Add SSL Cert -> pick Let's Encrypt
3. Enter any domain
4. Toggle Use DNS Challenge
5. Chose Netcup as Domainprovider - you don't even need working credentials error occurs nonetheless
6. See error

Operating System
Installed in a Proxmox LXC (Debian) using https://community-scripts.github.io/ProxmoxVE/scripts?id=nginxproxymanager

At this point I'm not sure if this is an issue with proxy manager or certbot but I need to start somewhere. Also seeing certbot in CLI works I suspect something amiss with the certbot call using the Netcup integration.

[sepperlot]

Seems to be a problem with the Proxmox install? Not really sure though
Installing pip install certbot-dns-netcupsystem wide instead of the created virtual environment apparently fixes the issue. Now I can even create certs without providing my credentials ¯\_(ツ)_/¯