@moritzheiber Not sure if it meets your criteria of sane configuration, but Apache2 supports TLS with Let's Encrypt kind of baked-in (via `mod_md`, since 2.4.33), http2, logging format can be customised, and the license is sane. It's also available on pretty much every Linux distro, and should be available for the BSDs as well in ports/pkgsrc.