cerbot should be installed on the solr host, and configured to set up SSL certs for whichever domain we register. certificate should be installed for use by NGINX SSL should be terminated at NGINX