RE: Fighting towards MORE decentralization...

Caddy is able to get certs from LetsEncrypt(or Zero SSL by default iirc) and I switch over to that rather than self signed certs for non CF proxied stuff.