For self hosted, if you use porkbun for DNS it will automatically pull a wildcard SSL cert using the API at startup.

I plan to also support multiple custom domain certs on a multi tenanted instance like faasta.xyz. For now I'd recommend a reverse proxy though.