> the only downside [is] that there is no good option to enforce HTTPS
You also have to use GitLab.
You also have to use GitLab.
Am I missing something?
I mean, yes, if you have practical problems that make gitlab harder to use, don't use it. No problem at all. But it is still a perfectly valid solution for the problem the GP was trying to solve.