Ferdi has a shared Matomo instance exposed on its domain.
https://matomo.ferdinando.me/
trusted_hosts[] = "matomo.ferdinando.me"
letsencrypt certonly --webroot --webroot-path /home/www-data/piwik -d matomo.ferdinando.me