/usr/local/cwpsrv/conf/cwpsrv.conf
should start at line 47
server {
listen 2031;
listen 2087;
listen 2083;
server_name localhost;
ssl on;
ssl_session_timeout 90m;
ssl_certificate /etc/letsencrypt/live/YOUR-HOSTNAME/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/YOUR-HOSTNAME/privkey.pem;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;