Make ssl redirection a separate config