might have this working out of the box, still need to tinker w/ service
restarting, ssl...