You can use lets encrypt with dns tests from wide variety of providers. Also you can selfhost the control server of tailscale (headscale).

Why does this feel like nagging on projects I do on my free-time for my own?

I'm willing to learn but please try to be less condescending :)