Move location of nginx certs away from where other stuff lives, to make it easier to use a volume