Port forward to a DMZ, but terminate ssl connection at firewall

[Monkeynet]

I can't seem to find this option anywhere, do I have to use HAProxy even though I only have 1 user? Trying to figure this out, it seems like Pfsense can manage certs.