I’ve put together a walk through on using Let’s Encrypt for a controller here:
One thing I’ve not played with is doing this over HA controllers and having HA failures/etc. I think that’s not as well tested as I tend to use it more for demos and when folks are running things in production they will use their own provided certificates vs let’s encrypt.