snikket-prosody-only remove the automaticlly generate and renew cert, using existing one put everything behind a nginx revert proxy for https