Wow, I didn't expect this ("switching" to HTTPS) to be so hard.
For example, if instead of having hundreds of domains serving millions of users with tons of user-generated content you're just serving static content from a single server on a small site, the entire process for you might actually be as simple as just running `certbot-auto` on the production server.
I suspect the difficulty of switching for most sites will fall somewhere between these two extremes.
That's exactly what we experienced migrating a bunch of sites to https. There were so many things that we didn't anticipate.