Or if the author don't want to let Cloudflare control their entire domain and give away their users' data, since the author seems to self-host with nginx: Use certbot and python-certbot-nginx, very easy to setup and maintain

- https://www.nginx.com/blog/using-free-ssltls-certificates-fr...