Given that all certs are limited to a year, we're only a few steps away from the Let's Encrypt setup being automated everywhere.
- Not allowed to change authoritative DNS
- CAA set to everything except LE
- cannot set CAA to LE
Wouldn't it be nice?
Registrars are contractually required to allow registrants to change the nameservers associated with their domain.
I personally use NameSilo over Cloudflare because I don't want to give Cloudflare everything.
[0] https://www.namesilo.com/domain/transfer-domains
[1] https://www.cloudflare.com/en-gb/products/registrar/
https://developers.cloudflare.com/registrar/get-started/tran...
https://community.letsencrypt.org/t/web-hosting-who-support-...
Yes, you can set it up manually, but you have to do it every 90 days as opposed to having it automatically updated in a supported hoster.
Just install caddy on a $5/mo VPS instead of using your domain registrar as a host. It will automatically renew LE certs. Your current setup is almost always a terrible idea.