https support & HSTS

[rvalles]

Consider enabling HTTPS and HTTP Strict Transport Security.

[rvalles]

While HTTPS is present now, there's still no HSTS, and the certificate is currently not seen as valid by browsers.