externalizing the domain and https and such