Can you try updating trellis/roles/letsencrypt/defaults/main.yml based on Lets Encrypt ACME v2 support by swalkinshaw · Pull Request #1114 · roots/trellis · GitHub?
- acme_tiny_commit: '4ed13950c0a9cf61f1ca81ff1874cde1cf48ab32'
+ acme_tiny_commit: 'cb094cf3efa34acef8c7139c8480e2135422e755'
- letsencrypt_ca: 'https://acme-v01.api.letsencrypt.org'
+ letsencrypt_ca: 'https://acme-v02.api.letsencrypt.org'
https://discourse.roots.io/t/trellis-and-lets-encrypt-v1-end-of-life/16816