Lets Encrypt Renewal while self-hosting

So I have HA on an RPi, and I have port forwarded 8123 on my primary PAT IP to my internal RPi address. I do not have anything running on port 80 on that same PAT, so I could also forward that port inward to my HA RPi. But my question is, how to I get to the shell to set this up? The SSH Plugin gets me to an HA service shell, but not the underlaying HASSOS I guess. I would love to have LE take care of itself this way. Any pointers on how you got to the shell?