I did that, the very hard way (I didn’t know better at the time): https://whynot.fail/homelab/lets-encrypt-the-house/