Also if you don't need certbot anymore is your service managing its own ssl certs with letsencrypt? Isn't it generally easier to configure with a reverse proxy like nginx or caddy and terminate SSL at the edge? That's literally caddy's whole thing that it does SSL for you so that it doesn't concern your application.
docker + php-fpm + php7 + larvel + nginx + redis + cron + worker + certbot
Server after the rewrite to Golang:
server, a 15MB no-dependencies binary that has everything.