https://drunkcoding.net/posts/ks-04-cert-manager-alternative-with-cloudflare/