nginx and HTTPS

deploy/publish.sh validates DNS, provisions the certificate, configures HTTP-to-HTTPS redirect, and proxies HTTPS traffic to 127.0.0.1:8791.