Implement TLS for the entire site user flow

[jhodapp]

Suggestion / Feature Request

Description

We are working with sensitive data and user sessions, so this means we need to encrypt all user session traffic.

Requirements

• refactor.engineer domain is used as the site's production domain (already purchased)
• Reserve a static IP for the ubuntu-droplet1 (potentially not needed yet, TBD)
• Visiting http://refactor.engineer always redirects to https://refactor.engineer
• Open firewall ports 80, 443 on ubuntu-droplet1
• All interactions and data with the platform in production are always encrypted using latest TLS standard

[jhodapp]

For documentation purposes, I'm following this guide composed by Claude.ai for installing and using a TLS certificate. Will document here any ways in which I diverge from it.

[jhodapp]

I decided to install nginx natively on the droplet server instead of using a Docker container version like the instructions suggested. This means I installed an available-site virtual host config that compliments the base nginx config located in nginx.conf.

I didn't think the overhead of Docker was really necessary for nginx and decided to keep this reverse proxy very thin to cut down on some resource usage. Eventually if we need to scale this, we'll need to reconsider this decision and move to a horizontally scalable reverse proxy for serving TLS certificates and other load balancing functionality.