ssl and geoip always