We need HTTPS for the web platform. Probably the most sensible way to do it is: - [ ] add letsencrypt to the ansible provisioning script - [ ] set up automatic renewal for certs - [ ] redirect all HTTP trafic to HTTPS (HSTS?)