deploy: enable trusted HTTPS IP endpoint

deploy/server/compose.override.yaml

@@ -15,7 +15,7 @@ x-server-backend-environment: &server-backend-environment
   OBJECT_STORE_SECRET_KEY: ${MINIO_SECRET_KEY}
   OBJECT_STORE_EXPORT_BUCKET: private-exports
   OBJECT_STORE_REGION: us-east-1
-  OBJECT_STORE_SECURE: "false"
+  OBJECT_STORE_SECURE: "true"
   CURSOR_SIGNING_SECRET: ${CURSOR_SIGNING_SECRET}
   SHARE_TOKEN_SIGNING_SECRET: ${SHARE_TOKEN_SIGNING_SECRET}
   EMBEDDING_PROVIDER: local
@@ -159,8 +159,10 @@ services:
     image: nginx:1.30-alpine
     ports:
       - "80:80"
+      - "443:443"
     volumes:
       - ./deploy/server/nginx.conf:/etc/nginx/conf.d/default.conf:ro
+      - /etc/letsencrypt:/etc/letsencrypt:ro
     depends_on:
       - api
       - callbacks