The script posted alerts to https://ntfy.silverwal.com/certbot, which is
served by the same nginx whose certificates it monitors. A TLS failure on
this host would make curl -fsS fail verification and drop the alert
describing that failure, leaving only a line in a log nobody reads.
ntfy is already bound to 127.0.0.1:2586, so post there instead.
These were dropped in b1b4296 when the README was trimmed, which left no
record in the repo of how the script gets onto the server or how it is
scheduled.
The script had been saved with CRLF terminators, which makes the kernel
look for an interpreter named 'bash\r' and fails the script with
'bad interpreter: No such file or directory' when run on the server.
Pin LF via .gitattributes so editors on the Windows side of /mnt/d
cannot reintroduce it.
