Interesting. Deserves a blog post. Accessing sites via ssh.

Can add an appendix of alternatives like DNS based https certificate from letsencrypt (obtained on a different machine, copied to the old machine), self generated https certificate, you could likely run caddy on the original server too since it's a single binary.