fix: certbot 컨테이너 제거 후 호스트 certbot 방식으로 전환

- certbot-dev, certbot-prod 컨테이너 및 named volume 제거
- nginx volume을 호스트 bind mount(/etc/letsencrypt, /var/www/certbot)로 변경
- nginx 인증서 경로를 단일 /etc/letsencrypt 경로로 통일
- nginx Dockerfile에서 불필요한 certbot webroot 디렉토리 생성 제거

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: RookieAND

docker-compose.yml

@@ -51,10 +51,8 @@ services:
       - 80:80
       - 443:443
     volumes:
-      - certbot_conf_dev:/etc/letsencrypt-dev
-      - certbot_www_dev:/var/www/certbot-dev
-      - certbot_conf_prod:/etc/letsencrypt-prod
-      - certbot_www_prod:/var/www/certbot-prod
+      - /etc/letsencrypt:/etc/letsencrypt:ro
+      - /var/www/certbot:/var/www/certbot
     depends_on:
       - client-dev
       - client-prod
@@ -66,42 +64,8 @@ services:
       - "mode=unified"
     restart: on-failure
 
-  # Development Certbot
-  certbot-dev:
-    image: certbot/certbot:latest
-    container_name: yogieat-certbot-dev
-    volumes:
-      - certbot_conf_dev:/etc/letsencrypt
-      - certbot_www_dev:/var/www/certbot
-    networks:
-      - yogieat-dev-network
-    entrypoint: "/bin/sh -c 'trap exit TERM; while :; do certbot renew; sleep 12h & wait $${!}; done;'"
-    labels:
-      - "name=certbot-dev"
-      - "mode=development"
-
-  # Production Certbot
-  certbot-prod:
-    image: certbot/certbot:latest
-    container_name: yogieat-certbot-prod
-    volumes:
-      - certbot_conf_prod:/etc/letsencrypt
-      - certbot_www_prod:/var/www/certbot
-    networks:
-      - yogieat-prod-network
-    entrypoint: "/bin/sh -c 'trap exit TERM; while :; do certbot renew; sleep 12h & wait $${!}; done;'"
-    labels:
-      - "name=certbot-prod"
-      - "mode=production"
-
 networks:
   yogieat-dev-network:
     driver: bridge
   yogieat-prod-network:
     driver: bridge
-
-volumes:
-  certbot_conf_dev:
-  certbot_www_dev:
-  certbot_conf_prod:
-  certbot_www_prod:

docker/nginx/Dockerfile

@@ -11,7 +11,4 @@ COPY ./config/nginx.conf /etc/nginx/nginx.conf
 # 로그 디렉토리 생성 (환경별)
 RUN mkdir -p /var/log/nginx/client-dev /var/log/nginx/client-prod
 
-# Certbot webroot 디렉토리 생성 (환경별)
-RUN mkdir -p /var/www/certbot-dev /var/www/certbot-prod
-
 CMD ["nginx", "-g", "daemon off;"]

docker/nginx/config/client-dev.conf

@@ -6,7 +6,7 @@ server {
 
     # Certbot ACME challenge
     location /.well-known/acme-challenge/ {
-        root /var/www/certbot-dev;
+        root /var/www/certbot;
     }
 
     # HTTP to HTTPS redirect
@@ -23,8 +23,8 @@ server {
     server_name dev.yogieat.com;
 
     # SSL Certificates
-    ssl_certificate /etc/letsencrypt-dev/live/dev.yogieat.com/fullchain.pem;
-    ssl_certificate_key /etc/letsencrypt-dev/live/dev.yogieat.com/privkey.pem;
+    ssl_certificate /etc/letsencrypt/live/dev.yogieat.com/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/dev.yogieat.com/privkey.pem;
 
     # SSL Configuration
     ssl_protocols TLSv1.2 TLSv1.3;

docker/nginx/config/client-prod.conf

@@ -6,7 +6,7 @@ server {
 
     # Certbot ACME challenge
     location /.well-known/acme-challenge/ {
-        root /var/www/certbot-prod;
+        root /var/www/certbot;
     }
 
     # HTTP to HTTPS redirect
@@ -23,8 +23,8 @@ server {
     server_name yogieat.com www.yogieat.com;
 
     # SSL Certificates
-    ssl_certificate /etc/letsencrypt-prod/live/yogieat.com/fullchain.pem;
-    ssl_certificate_key /etc/letsencrypt-prod/live/yogieat.com/privkey.pem;
+    ssl_certificate /etc/letsencrypt/live/yogieat.com/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/yogieat.com/privkey.pem;
 
     # SSL Configuration
     ssl_protocols TLSv1.2 TLSv1.3;