Moved SSL configuration to main configuration file and deleted the obsolete ssl.conf file. Added content security policy and extended the HSTS header to include all subdomains. @todo generate new certificates with shorter key length to improve performance.