Virtualwarden and caddy are a perfect duo. A letsencrypt cert automatically issued and renewed over the tls path into your own store.