This is all you need to create a self-signed X509 certificates that lasts for 365 days, and a 2048-bit-long certificate key:

/bin/sh: chroma: not found

This will ask you a few questions which should be self-explanatory. When asked about the FQDN, you can use the IP address of the server.