allow deployers to easily specify whether the https ingress is an internal or external (public) IP address

[w-le]

currently it's always external but that does not suit most client-specific (non SaaS) deployments

[viv-4]

added for Azure: 613777a