Hi MikroTik team,
It would be great to have Cloudflare API (DNS-01) integration for the /certificate enable-ssl-certificate command. This would allow automatic Let's Encrypt certificate renewal without exposing TCP/80 to the WAN.
I've submitted the idea from this post as feature request, and MikroTik has answered with:
We are aware of the current limitation, perhaps something from the proposed will be added in the future.
Something like that, if implemented, would work with all registrars, regardless of whether they have (free) DNS API or not.