Probably the best recommendation I can give is the certbot cloudflare plugin docs: https://certbot-dns-cloudflare.readthedocs.io/en/stable/ https://certbot-dns

Probably the best recommendation I can give is the certbot cloudflare plugin docs: https://certbot-dns-cloudflare.readthedocs.io/en/stable/ https://certbot-dns-cloudflare.readthedocs.io/en/stable/ I use this in my own setup. When letsencrypt provides a DNS challenge, the cloudflare plugin will complete it. The only requirements are (a) owning a domain (b) having cloudflare control it (c) somewhere to run the certbot renewal cron job If you don't like b, you can swap out cloudflare for any of the other DNS providers. I chose it because it's free. For devices which can't run certbot (e.g. a managed network switch) I run certbot on a raspberry pi and use a deployment hook to deploy it. The code for deploying to a tp link switch is open source: https://github.com/NotBobTheBuilder/cert-deploy-t1600g-28ps https://github.com/NotBobTheBuilder/cert-deploy-t1600g-28ps