The plan all along is to also open source #Henhouse so you can self-host it. Today I did some work towards that goal so you can configure it to manage its own certificates OR stick it behind a proxy, like Caddy, that will deal with all the certificates. When you do that it will offer an internal HTTP server you can configure Caddy's `on_demand_tls.ask` directive to hit so it can instruct Caddy whether or not to provision a certificate.