it works!!

Makefile

@@ -138,7 +138,6 @@ certbot:
 		--webroot \
 		--webroot-path=/data/letsencrypt \
 		-d ${HOSTNAME} \
-		--dry-run \
 	&& cp ${PWD}/letsencrypt/certs/live/${HOSTNAME}/fullchain.pem ${PWD}/https/cert.pem \
 	&& cp ${PWD}/letsencrypt/certs/live/${HOSTNAME}/privkey.pem ${PWD}/https/key.pem
 

default.yml

@@ -40,6 +40,9 @@ services:
     volumes:
       - storage:/var/www/html/images/
       - assets:/var/www/html/_assets/
+      - type: bind
+        source: ${PWD}/letsencrypt/data/.well-known
+        target: /var/www/html/.well-known
       - type: bind
         source: ${PWD}/https/${HTTPS_CERT}
         target: /etc/ssl/certs/cert.pem