one thing I don't like is how it uses a single cert for all domains by default, gonna have to fix that config