I just put the service behind a reverse proxy using nginx (although you can use apache), especially since I have other stuff running on this server.
If you're already running another web server for something, it might be easier to go this way, since your certificates might be already hooked up to nginx. (and LE handshakes are a lot easier to configure with nginx than with calibre)
|