improve nginx set to include generated self-signed certs and externalized conf