This won’t work until the NginxProxyManager release version (as of now latest=2.14.0) catches up to a commit that was made to its source code on April 13 which updates the Desec Certbot plugin to version 1.3.1 from 1.2.1. The old version does not include my patch that enables CNAME chaining. The new one does, but has yet to be included in the release version of NginxProxyManager. I would expect an update soon, because some severe security bugs have been revealed in Nginx.
If you’re familiar with your container system, you can execute an update inside the container. With podman, you’d do something like:
podman exec nginxpm pip install certbot-dns-desec==1.3.1
where nginxpm is the name of the container that you want to run pip in.