I use caddy for ssl letsencrypt grpc, api and web ui, but configured webui for private ips only. Works pretty well