Implement Certbot integration with autorenew. Handle production certificate installation via remote play. Setting up this via Ansible is ideal, but fall back could be manual.