@napierge @kasperd you could use a self signed certificate with the IP address only. People will have a warning and need to manually trust the certificate.
This is called TOFU (trust on first use). If you don't change the certificate for years, people who accepted it once will be fine.