muroxil You don't need to run any SSL Specific command if you're willing to go with the Origin SSL. Your site must be active on Cloudflare but it's not essential to point it to your new server. You will need to generate a certificate with --dns --le
command if Original SSL installation seems difficult to you.
No problem, if you don't have WP Rocket. NGINX Helper with FastCGI already handles the Page Cache pretty well so you can use the Autoptimize to handle the static resources better on your website.
As I mentioned earlier, WordOps already has very well-tuned configurations for PHP, MySQL, NGINX but still, you can edit those values as per your own choice or the available resources.