Just adding some clarifying comments on the bare-bones configuration.
When I first used the bare-bones configuration I had TLS issues, but
thankfully I was aided by the IRC support channel.  On my own I
would've been lost because I wouldn't be able to guess there were CA
certificates I was missing.

Because truly bare-bones setups may want to avoid both an NTP service
and Mozilla's CA certificates, I decided to only add them as comment
suggestions.

Regards,
Nikolaos Chatzikonstantinou