So I recon I could do a reverse proxy with lighttpd or nginx or the like, but that's just an extra process that I have to run and update and manage certs for. That's a (small) waste of resources and a (moderate) hassle. Is there a config I can change to run proxmox web ui on port 443 with a redirect on port 80 without yet another proxy server?

Strongly worded edit:

What's with all the idiotic people assuming somehow that I want to run this on the internet? I never said internet. I never mentioned router. I don't want to make anything publicly available. I just want the https management interface running on the https port so I don't have to remember the port number or go look it up if it's been a month, and I don't need to see it staring at me mockingly from the address bar, the only service on the management lan that either didn't default to 443 or trivially let me move out there without adding another proxy server in front of it.

Not only that, the only sane justification for running it on any port other than 443 is that another service may want to use 443 itself, but guess what? Proxmox is an appliance that's meant to not have any other services installed directly, only accessible through containers and vms with virtual ips and virtual interfaces with virtual ips. So why is it even set up in this way to begin with? Did someone think security by obscurity was a good idea? All I have to do when I forget it use https on port 443 to log into the iDRAC on the same fricking hardware and look at the port number presented on the screen. But that's still one more step than I should need to do. One more thing than I should need to remember. One more thing in the url bar than I should need to see. And there's no justification for it.

And yes, my stupid brain is making a bigger deal out of it every day than it needs to. I know it's silly to be bothered by it. But I'm still not so stupid as to even suggest trying to put it on the internet despite every useless answer I've received from every useless person who commented below.

Except that one person, who suggested the one useful idea. Still an annoying workaround, and not a proper solution, but thank you all the same.

Edit 2: and yes I know this post is now going to get downvoted by all the rocket surgeons who think setting the management port somehow means putting it on the internet. I guess I deserve the downvotes for having the gaul to get frustrated by the responses. I don't care. It just shows the character of the individuals involved and the community here. But there's really nowhere else to ask the little questions, so so be it.