My question is about SSL/TLS.
I'm running Ubuntu 18.04 server with: Apache2 serving 3 public domains on 1 public IP.
On the same server I'm running: Nginx and will configure as a reverse proxy to the 3 domains.
I must secure the sites with SSL/TLS.
On two domains I'm running the latest versions of: Nextcloud Rocket.Chat The third domain has static data.
I'm going to use Let's Encrypt - Certbot for SSL/TLS.
The question is, do I need to set SSL/TLS for the Nginx Reverse Proxy only (not hosting a domain), for Apache only (hosting all three domains), or do I need to do run Certbot for both Nginx and Apache?
My thought is that since Nginx isn't hosting a domain, there's no need to use SSL/TLS on it, thus I'd think I should treat SSL/TLS as though Nginx isn't even involved and only apply it to Apache.
All responses are appreciated.