One aspect of this many seem to forget is HTTP as a backend protocol, you will have to set up certificates and keep them up to date there too.