TEST_DNS_MANUAL=1 turns on le_test_dns_manual_renew, which answers the dns-01 challenge through the pebble-challtestsrv that the compose setup already runs.