I've got it behind a Caddy proxy, which then automagically sorts out Let's Encrypt for me. It works very well there, if that's any help to you?