I pretty much followed the instructions here: https://godoc.org/golang.org/x/crypto/acme/autocert
edit, better here: https://blog.kowalczyk.info/article/Jl3G/https-for-free-in-g...
I didn't believe it could be that simple, but it worked first time and has proven really robust.