$ # create document root
$ mkdir -p /var/www/fundraising/regala/www/

$ # simplify Let's Encrypt renewal
$ ln -s /var/www/html/.well-known /var/www/fundraising/regala/www/.well-known

$ # enable Apache HTTPd configuration (see the related file from the public configuration repository)
$ a2ensite it-wikimedia-regala-txt

$ # check if something is wrong in the TXT configuration
$ apachectl configtest
Syntax OK

$ # read new configuration
$ systemctl reload apache2

$ # deploy Let's Encrypt certificate
$ certbot certonly --webroot --webroot-path=/var/www/html -d regala.wikimedia.it

$ a2ensite it-wikimedia-regala-ssl

$ # check if something is wrong in the SSL configuration
$ apachectl configtest
Syntax OK

$ # read new configuration
$ systemctl reload apache2