As a user of POMBA, I want it to be possible to deploy POMBA such that reports are only available via https and not http.   This can either be the only option or a configurable parameter. It should be the default deployment though.

Note that when using https, http must not also be enabled.

I only require server-side certificates.

Placeholder