The setup now uses my Kubernetes controller for Let's Encrypt. This changes the nginx certificate locations to match the new secrets.