If you just want to communicate with it in your local network, it is possible by default and needs no TLS certificate as long as you trust all devices on your local network. I think exposing the Umbrel node to clearnet is also possible, but you maybe have to change your router config (open up ports)