Managing TLS

Three ways to give Portainer real TLS certificates: keep the built-in self signed certs, run Certbot on the host with a systemd timer for renewals, or put Caddy in front as a reverse proxy that handles the ACME dance for you.