ssl_ciphers in nginx config
https:// links on frontend wherever necessary/possible
rebuild static