I finally succeeded in deploying a hub using Traefik and docker-compose. Traefik acts as a reverse proxy and automatically obtains and installs LetsEncrypt SSL certificates for you. Ideally this will allow people to deploy a hub with almost a single command. It would allow the Hubzilla developers to maintain the system dependencies and things like database optimizations. There are still some things to work out, including the cron job and the DNS issue with the database container address (merge request submitted).