We use https://github.com/jo/couchdb-bootstrap successfully.

CouchDB does SSL natively, but we do recommend HAProxy.