externalize SSL settings