@jeffrey_way @digitalocean docs have a great guide on adding a self-signed SSL (not specific to their platform)