Small pro tip: if you going to use Nginx Proxy Manager - it has SSL cert generator built in that also auto-renews certs before they expire. Many people say that for security reasons, open only 443 port and close 80. But that will raise an issue where certs wont generate if port 80 is closed. Not sure if it works the same way with other reverse proxy managers. but it 100% does with NPM.