We've released integration with Let's Encrypt a few months ago.
And you can press a toggle while adding new domain on gitlab.com and enable it:
Why isn't it enabled by default? That way you can still disable the toggle if you want to insert your own certificate or disable ssl.
cc @ogolowinski @mnichols1