You’ll need to generate the .pem certificates, either from duckdns or any other provider (or use your own dns with cert-bot )