It even uses letsencrypt to get signed certs