Self-signed certificate and extra nginx settings