make letsencrypt optional for apache/postfix