From Arch wiki:
To securely access your Mattermost server from the Android and iOS apps, which do not support self-signed TLS certificates, you can setup a reverse web proxy.
The main benefits of a proxy are:
- SSL termination
- HTTP to HTTPS redirect
- Port mapping 80 to 8065
- Standard request logs
Proxying can be achieved with most web servers.