Would that need a web server and TLS cert?

It's a real shame most nodes don't support BOLT12 because it's literally made for this. Pure LN without the need for other layers and complications.