A minimal web setup for shell servers is nginx + letsencrypt.
This commit is a WIP: configuration still to do.
For let's encrypt, we've https://medium.com/@krak3n/let-s-encrypt-with-salt-stack-73f571647adf#.cl6bjxltz
T944 config should be taken in consideration
Plan is to separate configuration than software, and better reflect the state of config in repo
Discussed on IRC, no objection to commit first software installation, then config.
And repo should reflect the current deployed state.