- allow selecting a proxy SSL certificate before HTTPS is enabled in the settings page - block enabling proxy HTTPS without a selected certificate in both frontend and backend - prevent broken nginx config generation when SSL cert or key paths are missing