I think you could achieve this with largely the same method as typical when using Nginx, Caddy, etc.

The main difference is that where you’d usually use ACME/Let’s Encrypt - you’ll likely need to generate your own certs using a took like mkcert. You’ll need to get the CA cert used to generate the SSL certs and install it on any other systems/browsers that will be accessing the apps over https (mkcert will install them for the system you generate from).

If they’re businesses, then our tax dollars ought to be seen as investment money that pays us dividends rather then getting siphoned to the corporations. (This is an intentionally bad take - I fully believe public services need to be non-corporate and non-profit)

The bill comes due 🤷🏻