I cannot create a wild card certificate for self-hosted bare metal server

You should check if there is a plugin for some acme client that supports your dns server.