Fellow long-time self-hoster. I hear you on a lot of this.

Regarding letsencrypt, you can use DNS challenges. See https://letsencrypt.org/docs/challenge-types/ .