Here I use Caddy to host all my projects and configure their access with my domain. They do Let's Encrypt for you and it's so freaking easy that it's like SSL just comes by default, I haven't spent 1 minute thinking about this for years.
Install Caddy -> create a Caddy file with my subdomain and the IP:port to point to -> Run Caddy -> That's literally it.
It even auto renews it for me. Beieve me, there is no need to pay anything.

Interesting! I think I've been missing something. I'm checking on the documentation and will probably implement this on the next renewal or possibly early; this will save me $7 for every domain.
https://caddyserver.com/docs/automatic-httpsThe thread might have gone off topic, but I believe something comes out that will benefit every reader. Thank you for this!