Certbot + Cloudflare
sudo certbot certonly --dns-cloudflare --dns-cloudflare-credentials /etc/letsencrypt/cloudflare.ini -d "*.yourdomain.com" -d "yourdomain.com"Auto-renewal
0 3 * * * certbot renew --quiet --post-hook "systemctl reload nginx"