It can be easier. We've used https://github.com/GUI/lua-resty-auto-ssl to provide SSL provisioning on the fly at my previous company for our customers` custom domains. This also means that there is no downtime at all when they change the DNS record from their old servers to the new one