Yup. At the moment, I have to manually add it to the website site definition in flex-443 (I don't use the app; I get the original direct from NextCloud servers). NB: the redirect isn't necessary if ProxyPass is used as it already has the option to redirect http accesses to https.

I get that I could manually add a virtual host conf file (and create the various directories separately, but it would be much cleaner to leave the site definition/configuration at webconfig level and just have the option of enabling Transport Security at the same time - and as I say, if the period is definable, it makes the mechanism portable to any other site definition that may need it at a different rate.