Been using nginx, probably should change just because my mail uses letsencyrot while my http uses bought certs.

Letsencrypt has gone far enough that we can just rely on it now apparently.