Closes #291: add https for self-hosted