Enable Let's Encrypt by default

If a user specifies HTTPS in external_url but does not include certificates, we should automatically enable Let's Encrypt.