kub: use short hostname

to make tor guess its address instead of resolving
nginx: correct default server directives
flecu: force ssl
privoxy: only forward onion sites through tor2web