enforce https
sample.env