Add HTTPS support and NGINX proxy

The API server now lurks behind the walls of an NGINX server. SSL certificates are signed via certbot (praise be).

NB: You will need to append /api to your URLs in frontend/.env, otherwise the app will start failing. This is a breaking change.

NB 2: The Swagger spec is moved to just sit at /api, since I felt like that made some actual sense.