Pretty much that, enable the template for HTTPS and let’s encrypt, make sure port 443 is exposed and specify an email before rebuilding.
There’s very few good reasons to put Discourse behind a proxy. If it has a dedicated server and FQDN it will be much easier to manage with the above.