You should be able to set up SSL termination at the load balancer on Digital Ocean and forward the requests to the DO Droplets. https://docs.digitalocean.com/products/networking/load-balancers/how-to/ssl-termination/