Rasa secure socketio connection to Webchat client

I need to run Rasa in cloud server but then the Webchat client in webpage over internet. Connection between them is (web)socketio. So how make this work?

Should I use reverse proxy using Nginx or should I secure socketio directly with Letsencrypt?
There are lot of instruction for Nginx reverse proxy but a few for Rasa socketio letsencrypt/certbot , so if this is the preferred solution can you also instruct how to do it?

#rasa #socketio #secureconnection #letsencrypt #certbot