I haven't set up a dev blog yet, so I'll use this for now. I just used letsencrypt.org to add HTTPS to squawk.online. It was *much* easier that I anticipated. EFF created a great little utility that does all the work, certbot.eff.org, it even updates your server config. The only stumbling block was that I forgot my firewall was blocking 443. The certs only last 90 days so next I'll have to set up a cron job to do that for me.