Install haproxy and set up a Let's Encrypt TLS certificate for it.