I let cloudflare terminate tls on the damus relay. Im lazy and it’s all public data. I don’t even run nginx.