How to (re)enable TLS/STARTTLS in Nethserver AD

Yes, it’s explained here: