move app settings to separate source file

use repo encryption and SSL settings, resolves #516

(0) -30 -10 -2 +2 tip

mercurial