The purpose of the certbot container is to manage Let's Encrypt SSL certificates. Those certificates are to be used by the Notes application to configure an HTTPS server. It's required that the certificates, and the challenge files, be visible inside the notes container.
Instead of creating a separate container, we could have instead integrated certbot-auto into the notes container. But that would have prevented scaling the number of notes containers. We can't have each notes instance running a certbot-auto script to generate certificates. Instead, the certificate management processes must instead be centralized. Hence, we developed the certbot container.
What's ...