File templates/web.letsencrypt.ssl.template.yml:14 uses a version of acme.sh that has the wrong agreement in the form of "DEFAULT_AGREEMENT="https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf""
This agreement is outdated - there is a newer version now. Also, the latest version of acme.sh determines this agreement automatically from the letsencrypt response - it is no longer hardcoded.
Furthermore on templates/web.letsencrypt.ssl.template.yml:13 you should also install socat, because it is required by acme.sh since 2017.
After making the changes to this yml to install the latest version of acme.sh and install socat i was able to get intercity running with letsencrypt certs.
File templates/web.letsencrypt.ssl.template.yml:14 uses a version of acme.sh that has the wrong agreement in the form of "DEFAULT_AGREEMENT="https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf""
This agreement is outdated - there is a newer version now. Also, the latest version of acme.sh determines this agreement automatically from the letsencrypt response - it is no longer hardcoded.
Furthermore on templates/web.letsencrypt.ssl.template.yml:13 you should also install socat, because it is required by acme.sh since 2017.
After making the changes to this yml to install the latest version of acme.sh and install socat i was able to get intercity running with letsencrypt certs.