For me docker, and Discourse itself, is a big mystey, but is it enough that reverse proxy sends proxy_set_header headers? So there is no need to actually terminate SSL?
And mails doesn’t need to go out and then there could be use mail inside system? Something that all pingvins have known ages.
But if there is actual and real need to terminate SSL would selfsigned cerificate work?