[Kururin]

I would like to see your cronjob solution.

The issue I see at hand is that probably a cronjob can't update the DNS challenge records for you, unless your DNS hosting provider has a API for that and you write a script that somehow manages to update it properly (how do you control issue with the waiting time of DNS propagation updates???).

Automated DNS challenge does exist but as far as I figured out during research it only supports GoDaddy DNS so far.

Oops sorry, I mixed up lexicon with cronjob since it is similar. I followed this article's example https://id-rsa.pub/post/certbot-auto-dns...h-lexicon/ and piped it to my digitalocean api key to run every 3 months. I think the article is a bit redundant, I suggest using this instead https://github.com/go-acme/lego