Sign-up is not in HTTPS

[FabienGandon]

We need HTTPS at least when working with passwords

[vemonet]

HTTPS can (and probably should) be enabled at the level of the proxy, not at the application level.

There are solution to easily automate it with LetsEncrypt and ACME:

• when using docker nginx-proxy: https://github.com/nginx-proxy/acme-companion
• It seems to even be natively integrated in nginx nowadays: https://letsencrypt.org/2025/09/11/native-acme-for-nginx
• Caddy has it natively integrated https://caddyserver.com/