Trouble with Let's Encrypt renewal

Having a guess I think it might be related to acme.json permissions.

There should be something in your log relating to renewal and, since you removed the file, creation.

Treafik will reopen logfiles on USR1 signal. So you can integrate with logrotate.

I prefer the docker approach and either configure a logdriver to send logs to a logging system or use it to manage the container logs