@stijn I think we wrote a little ring handler, and used bidi to determine what protocol was incoming.

@stijn I've had good experiences using caddyserver for this kind of job: it integrates with letsencrypt out of the box, does the forwarding by default. Configuring it is a lot easier than nginx

@dominicm do you have an example for that? I don't understand how bidi is in play for this scenario

@stijn bidi can have a different set of matches for http or https using vhosts

@wdullaer we are on AWS elastic beanstalk with load balancers that get their certs from AWS certificate manager though. but good suggestion nonetheless 🙂

@dominicm OK, that's very useful!

I'd help more, but I'm on a bus :)

no problem, I think I can figure that out, thanks!