The configuration is dead simple, built in letsencrypt and SSL upgrade management, and I've got three docker instances behind it as a reverse proxy and it's only consuming ~40 MB of RAM.

Oh, and it's written in Go, so no dependencies so launching it in docker is a stupid small image.