Now I assume certbot will be able to create acme-challenge files here so I can successfully get a letsencrypt certificate. Unfortunately I am rate-limited at the moment due to too many failed experiments, so I'll have to wait a week (I'll try again on 10/17/19).
Thanks for your help.