Let's Encrypt and the !fs communtiy has made it insanely easy to encrypt stuff. And here I've been putting together random scribbles of shellscripting to glue stuff together - and Debian's "letsencrypt" package does just about everything I need.