Comment by lowercasename

That's a really interesting point and one I hadn't considered! I'm reverse proxying it through a larger server on the home network which is public-facing, and that server automatically slaps HTTPS on whatever it sends out.