Another approach to solving this problem is to use Tailscale and their new SSL feature [1]. This of course is dependent on that you use Tailscale, but it is pretty handy and does give you a Let's Encrypt cert.

[1] https://blog.viktorpetersson.com/2022/12/23/securing-service...