Caddy makes "production HTTPS" two lines of config. Magic. https://caddyserver.com