either use cloudflare or if you dont use cloudflare, set up a sub domain with the build in startos lets encrypt cert, them add a txt record (A) according to your setup as following the startos instructions