Good point - the main reason I hadn't yet done this is because the whole thing is split into docker containers (static page, api and mail server) and couldn't decide the best way to put a certificate on it without moving to something like Vault.

Will certainly look into this further!