externalize ssl configuration