Using the Docker install from https://fleetdm.com/try-fleet is there a good day to incorporate Let's Encrypt SSL certificates? I was able to get a test Windows host to connect using ~/.fleetctl/fleetctl package --insecure --type=msi --enable-scripts --fleet-desktop --fleet-url=https://my.domain.com:8412 --enroll-secret=[...] but don't want to use "--insecure" for hosts in the wild.

Hi @A p u! If you're using a self-signed cert, you'll need to use -

-fleet-certificate

to pass the full certificate chain to the agent.

Hoping not to use a self-signed cert but rather have certbot get a Let's Encrypt certificate and manage renewals.

Sorry about that @A p u, I must have misunderstood the question. Yes, you should be able to set up certbot to set up the certificate, then you'd need to put it somewhere where the Fleet container can see it.