use wildcard protocol for external resources.

Otherwise we can't serve it over https
fix dockerfile mode