The dns_cloudflare [1] also automates the cert generation and follow on renewals on a cron or via nginx proxy manager. Uses cloudflare API key, modifies the TXT record, issues/updates a cert and deletes the record.

[1] https://certbot-dns-cloudflare.readthedocs.io/en/stable/