Traefik Let's Encrypt ratelimit

Could somebody please be so kind to explain to me how this works because I've locked all my domains out again for the second week in a row.

  1. Why will it for every docker-compose restart try to fetch new certificates although the acme.json is unchanged and in a (persistent) directory on the host?
  2. Why will it also demolish all already running sites when it cannot renew because of this rate limit?