We took the simple solution of running haproxy to handle ssl, and then using a woo server behind that. This is that setup: https://graphmetrix.com

Given present day approach of using reverse proxies for TLS termination, that's not much of a limitation.

That's the solution I use with mod_lisp running behind Apache too, but I'd like to get away from Apache. I'll try haproxy.

HAproxy is really, really good.

Personally I also use nginx as reverse proxy a lot, but that's more because there's a ready to use Ingress Controller for kubernetes that uses it internally.