dns.debian.org: add letsencrypt.sh