just needs ssl termination for lb