I’d finally had enough of the complex configuration and pain implementing ssl.
No more. Just use caddy.