Https with let's encrypt behind a vpn?

Apparently let’s encrypt doesn’t publish the IP ranges that they do their validations from. so we would basically have to open the server to the internet which isn’t a possibility.

I guess i need to buy a cert, and then follow this? Advanced Setup Only: Allowing SSL / HTTPS for your Discourse Docker setup