Let's Encrypt with modsecurity

[sspeed]

Trying to figure this out and need to ask dumb questions, be gentle with me.

I have a modsecurity/reverse proxy front end, it passes the request over to one of three servers depending on domain (a Synology web server, a Blue Iris server and an Acuparse server).

Where would I need to configure the Let's Encrypt certificates? I assume it would have to be on the modsecurity frontend as that is where the request is initially coming to, but won't traffic be just http once the modsecurity frontend passes it to the 1/3 web servers? Do I need certs in both places?

[Osiris]

@sspeed

Do I need certs in both places?

That depends if your internal network is deemed safe or not I think.

[sspeed]

Secure network. I got it working, modsecurity reverse proxy to http. Way easier than I expected, thanks!