Ideally having an nginx or traefik server in-between to dish out SLL/TLS. I've tried with cert-manager kubernetes helm, but just couldn't get it. Moved on since.