add --allow-root so wp-cli will run successfully
add port 443 to listen for ssl