Single-command SSL reverse proxy with autogenerated certificates (LetsEncrypt, self-signed, provided)