If you follow the standard install you’ll have a letsencrypt certificate which is supported and automatically renews.
If you want to use a custom certificate, there exists a topic describing how to do it.
2 Likes