I’ve been using Caddy instead of nginx for years now. As long as your port forwarding is already setup, it’ll pull TLS certs for every domain in the config automatically and keep it up-to-date forever.

It’s also super easy to use as a reverse proxy, so you can run one caddy server for all your sites on the same machine pretty easily.