Self-signed certificate and extra nginx settings

TP: https://rockabox.tpondemand.com/entity/6663
fixed