Do you have to control the domain? That's the main source of your rate limiting issues.
If you can use different domains for different customers, then you can scale that better.
Look into Caddy for automatic ACME integration: https://caddyserver.com/ - This + DNS or HTTP challenge, it sounds like this might work for you.