http redirects to https
use real certs & point domain
update gitignore