That's not really HN's fault but all modern browsers will warn the user before accessing an http site with a security warning.

My point was not to use http only as a finished solution, but to let the admin front the http-only service with their TLS termination solution of choice.

We are talking about hobbyists here.

... Of which (TLS terminators) caddy is IMO the easiest for hobbyists, as was the starting point of this subthread