devops: ensure main app uses default ssl