Hello,

Have you had a look at this thread.

The procedure should be the same, but instead of using the self signed certificates you would be using the ones you got off lets-encrypt.

Kind regards!