Use ejs or hello-world
Switch to https (whee, self-signed certs)
node-specific ignores
variables in ejs