Using let's encrypt in the backend server

You can try to either pass the certificate to the backend server (from proxy) or to use DNS validation and obtain certificate with TXT records