How I implemented custom domain support with automatic TLS certs for my SaaS app (headey.net)

I had previously looked into Cloudflare's on-demand offering and was also disappointed that their service seems out of reach for bootstrapped or early stage startups.