My router has Caddy to reverse proxy all http sites which uses a certificate it gets from let’s encrypt.