You could consider using caddy or traefik, there is nothing to configure (or access to your dns provider if you want to use this).

I've been using them for years and never had to deal with certificates anymore.