Thanks for the reply. I've figured out I could use encrypted websockets between the client and OLS, and then unencrypted websockets between OLS and my backend server, so all is well (having a certificate issue with webhooks but I can figure it out).
I had read a reference to a "Port Offset" (a single value that would shift all ports by say 2000, e.g. port 80 would become 2080) so that OLS would not listen on default ports like 80/443 and would be able to coexist with another web server like Apache or Nginx.