add firewall
add nginx config
add script for creating self-signed SSL cert