Thank you for this! I used with an nginx reverse proxy via docker / podman as well. Just mounted the SSL files in there. I included a dhparam file.

I had to temporarily allow HTTP/80 to my machine for certbot to run, then removed it from my security group for this EC2. Otherwise worked like a charm!