https://documentation.ubuntu.com/server/

a setup guide would be very relevant for practical tls setups. can then be referenced from all other services using tls encryption (instead of their current defaults of creating new self-signed CAs).

the manual ca setup should also become a separate article, and then users can fall back to the manual steps for better understanding or in corner cases.