The root ca installation is the boring part, installing a local Let’s Encrypt instance is much more fun