Document how to setup ssl

This is possibly the last missing bit of the deployment: providing https at the reverse proxy level.