Synapse can now automatically provision TLS certificates via ACME (the protocol used by CAs like Let's Encrypt).