Better nginx deployment

Right now nginx is deployed with full SSL config from the start. This fails because there are no SSL keys set up, which would typically come from Let's Encrypt. However, Let's Encrypt needs a plain http nginx to be running.

A better strategy would be to first configure a non-SSL nginx, then allow the user to get the certificate (or get it automatically), then restart with SSL enabled.