optional ssl config for nginx (tested only as disablable atm)