Enable SSL to sign in URL

Hello:

I'm still wrapping my head around SAML / SSO mandate with my company and setting up Hub so bear with me on this.  

How do I setup SSL on Hub?  Specifically, when a user navigates to the Hub server I'd like to serve it up with SSL.  I've gone through the documentation and didn't see anything obvious, is it recommended to use a reverse proxy?

Thank you,

Jonny P.