[okket]

> Now you want to add HTTPS to it? It's not easy.

Try Caddy with automatic HTTPS [0] in reverse proxy mode [1].

[0] https://caddyserver.com/docs/automatic-https

[1] https://caddyserver.com/docs/proxy

[Teichopsia]

Pardon my ignorance, but as a complete beginner how do you hook that up with a python (flask / gunicorn) app?

[okket]

Run the python process on a different port and let Caddy act as a proxy, forwarding requests from the original port to it. As described in the second (proxy) link.