This post outlines the steps I needed to get Let's Encrypt to work on a Synology device that has been upgraded to DSM 7 and is not accessible from the public internet.

Your Ubiquiti UniFi Controller is probably already set to make automatic backups. Why not copy them off the server automatically for safekeeping in the event of a hardware failure?