* Webserver security * Create vHost dirs during install; link vHost to sites-enabled * Remove default vHosts during install * Only generate new DH params when also using real certificates * Removed duplicate ssl_ecdh_curve