I'm curious, why lighttpd and not nginx?

Also certbot doesn't directly support lighttpd but you can still automate the whole Let's Encrypt renewal process with a brief script on top of it.