I'm using certbot and acme/autocert, and it has been a few years since I last fiddled with this (even though I have CD happening !).

I was a bit mad at certbot for having chosen snap as its recommended installation platform, but my solution to use pypi + CD seems to be quite stable (famous last words).

The go services I run with autocert have had no manual intervention ever since the ACMEv2 move.