Let's Encrypt allows nginx reverse proxy servers to have a real, trusted SSL certificate, even for internal sites.