it is not, OP states in their blog that they use a cloudflare reverse proxy (probably a cloudflare tunnel) to secure the fmd instance, but you can also just not expose it to the web and use a VPN to access it on your home network :)
that’s genius. i have never even considered that you could use a (sub)domain with a local ip like that to get a certificate from a trusted ca. i ma not sure i understand the neccessity for api access to your dns service. is the txt record for LE different every time you have to pass a challenge? otherwise i imagine you could just set and forget the record.
thank you for the explanation, well appreciated!
could you expand a bit on your edit? so bitwarden extensions need a valid ssl certificate for the domain where the server is hosted? how do you get that for (i assume) a local domain? thank you for your time!
great article, very pragmatic. thank you for sharing!