Earlier quoted context omitted.
Most of my services are only available by using a vpn into my home network. I can understand why you might need a public facing service but I avoid it like the plague.
I have an EC2 instance running caddy that proxies through to my RPI cluster via VPN. It was pretty easy to set up. And Caddy handles HTTPS and HTTP->HTTPS redirection out of the box.
Thank you. Caddy sounds like something I was looking for recently.