Off the top of my head https-only is an available setting but is not enabled by default. Although “insecure website warning” would suggest to me that the certificate is expired or invalid, and Firefox is usually the easiest web browser to push past a self-signed certificate warning for local services