In the interest of giving more than “there are tons of those” I’ll suggest starting the search with https://caddyserver.com/

It provides a CA, reverse proxy, and can act as its own ACME server, providing mTLS between instances.