Add TLS for Apache

[oparoz]

This is required for people connecting their device to the Internet

• [ ] Generate self-signed server cert and key at init time
• [ ] Enable TLS support in Apache
• [ ] Strengthen ciphers
• [ ] Enable HTTP/2 #5

See https://github.com/kyrofa/owncloud-snap/issues/44

[kyrofa]

Ship generic server cert and key

Note that these should be generated on first run, not shipped in-snap.

[oparoz]

Note that these should be generated on first run, not shipped in-snap.

Why? The hostname is always the same and fake until the owner configures a proper domain

[kyrofa]

Why? The hostname is always the same and fake until the owner configures a proper domain

Because if everyone has the same keys (that can be retrieved easily) it's not really adding any security at all, is it?

[oparoz]

Because if everyone has the same keys (that can be retrieved easily) it's not really adding any security at all, is it?

Very true and very Dell of me :)