Look into let’s encrypt and acme. Requires a publicly registered domain though.