I guess that the JSS tomcat is pretty standard, which means that it shouldn't be any problem setting up a reverse SSL-terminating proxy in front of it.
Am I correct in that assumption?
What would be best, Apache or Nginx?
I'm thinking the instructions for Jira (which I have setup before) should be pretty similar to what's needed for the JSS.