Did you run discourse-setup? It checks that your hostname resolves to your virtual machine.
But if you did many rebuilds before let’s encrypt was able to connect then you’ve been rate limited and will need to wait a week, use a different host name or cheat by adding a second hostname as described at