The objective of DevOps is simplicity. But with so many moving parts, getting the Rube Goldberg machine to run without a hitch is challenging even under the best circumstances. Recently, I had a need for a rapid deployment of a LetsEncrypt-enabled web service, and I was tired of doing, well, any manual steps. So I buckled down and figured out how to get an app deployed with a real domain and a real cert in a single move.
Here's how I got it done. Hopefully this process can be of use for you.