add SSL to nginx.conf