I cannot manage to set up SSL/TLS with Certbot

[alexmro]

I am trying to follow the instructions here and here but I still cannot establish a HTTPS connection.

I have this configuration

{
  "listeners": {
    "*:80": {
      "pass": "routes"
    },
    "*:443": {
      "pass": "routes"
    }
  },

  "routes": [
    {
      "match": {
        "uri": "/.well-known/acme-challenge/*"
      },
      "action": {
        "share": "/srv/www/public$uri"
      }
    },
    {
      "action": {
        "share": "/srv/www/public$uri"
      }
    }
  ]
}

First, I ensured that port 443 is open. I used Certbot to generate the certificate with the the webroot method

sudo certbot certonly --webroot -w /srv/www/public -d mywebsite.com

I create the bundle and sent it to the certificates API (using curl -X PUT --data-binary @bundle.pem http://localhost/certificates/certbot). Everything good so far. No errors.

I update the configuration with

"*:443": {
  "pass": "routes",
  "tls": {
    "certificate": "certbot"
  }
}

Now, when I try to access the HTTPS version with curl, I get this:

* Host mywebsite.com:443 was resolved.
* IPv6: (none)
* IPv4: 1.2.3.4
*   Trying 1.2.3.4:443...
* Connected to mywebsite.com (1.2.3.4) port 443
* schannel: disabled automatic use of client certificate
* ALPN: curl offers http/1.1
* Recv failure: Connection was reset
* schannel: failed to receive handshake, SSL/TLS connection failed
* closing connection #0
curl: (35) Recv failure: Connection was reset

Previously, I could set it up with NGINX or Apache, but Unit doesn't work

_{ip and domain changed for privacy reasons}

[alexmro]

I forgot to allow the 443 port in the firewall. I wish there was a "unit" profile that I could allow and not care about each port anymore