ServerPilot handles SSL via Let’s Encrypt and will configure it automatically. All it took was a couple of button clicks and I have a cert configured and all non-SSL requests are automatically redirected to their https counterparts. I can’t think of a good reason not to use it.