[atomic] Letsencrypt with Atomic Registry

[Ken Dreyer <kdreyer redhat com>]

I was wondering if anyone has pointers with using Letsencrypt with
Atomic Registry?

Is it as simple as setting up the following in
/etc/atomic-registry/registry/config.yml ?

http:
  addr: localhost:443
  tls:
    letsencrypt:
      cachefile: /tmp/cache-file
      email: kdreyer redhat com

Moreover, it would be nice to be able to use the same cert for my
master, console, and the registry daemon, since they're all on the
same FQDN. Should I try to reverse-proxy all of them with nginx on TCP
443 instead?

- Ken