config ssl only for production