Hello,
Today I have got
Letsencrypt + Hiawatha (as a Reverse Proxy) working with the webroot method [it-offshore.co.uk] (which can be scripted to renew certificates automatically). Hopefully my notes can save others some time.
I have also sent a patch into Alpine Linux today to add
letsencrypt-nosudo [patchwork.alpinelinux.org]