I don’t think it’s self-signed… I used Caddy to generate the certs and copied them over into the config for the service. The service2 that I’m unable to access is ActualBudget and I followed their instructions from their docs (actualbudget.org/docs/config/https)