Caddy is the recommended and easiest way to set this up (guide here), but HTools ACME works with any client including certbot.
Assuming nginx here, but any target certbot supports will work.
Get a regular web server running as usual. simple nginx config: