Main changes:
* expose via https
* configure letsencrypt cert
* use www-data user instead of custom thelounge user
* proxy via unix:/tmp/thelounge.socket