Instead of an external CronJob pod, or a supervisord cron daemon, we use
a subshell. Also we assume, the regular cronjob *also* needs to run when
the container starts. Insofar, we start the subshell, make sure it runs
a single time (and continues in the background) and then continue with
starting clarin-dspace.

Address #48

'502 Bad Gateway' errors from the k8s ingress server can be solved
(sometimes) by restarting the nginx pod. Here we check
https://clarin(-dev).eurac.edu:443

Addresses #53

- fixed some issues with Deployment Guide

Sync config with https://gitlab.inf.unibz.it/commul/docker/commons/blob/master/helm-charts/webserver/nginx.conf

Fix #35.

This reverts commit 9717f5b1 because
withwith #35 fixed 'xmlui.session.ipcheck' can be safely used again.

- disabled ssl-passthrough
- configured ssl-certs

FIXME:
- repository/oai is not accessible via http
- battle test the config