Add to config a .home and wildcard cert with *.home. to seperate the the internal exposed services and the external in a easy way.