docs: document GIT_PROXY_HTTPS_UI_PORT and HTTPS UI/API server

Author: fabiovincenzi

website/docs/configuration/overview.mdx

@@ -47,18 +47,24 @@ npx -- @finos/git-proxy --config ./config.json
 ### Set ports with ENV variables
 
 By default, GitProxy uses port 8000 to expose the Git Server and 8080 for the frontend application.
-The ports can be changed by setting the `GIT_PROXY_SERVER_PORT`, `GIT_PROXY_HTTPS_SERVER_PORT` (optional) and `GIT_PROXY_UI_PORT`
-environment variables:
+The ports can be changed by setting the `GIT_PROXY_SERVER_PORT`, `GIT_PROXY_HTTPS_SERVER_PORT` (optional),
+`GIT_PROXY_UI_PORT` and `GIT_PROXY_HTTPS_UI_PORT` (optional) environment variables:
 
 ```
 export GIT_PROXY_UI_PORT="5000"
+export GIT_PROXY_HTTPS_UI_PORT="5443"
 export GIT_PROXY_SERVER_PORT="9090"
 export GIT_PROXY_HTTPS_SERVER_PORT="9443"
 ```
 
 Note that `GIT_PROXY_UI_PORT` is needed for both server and UI Node processes,
 whereas `GIT_PROXY_SERVER_PORT` (and `GIT_PROXY_HTTPS_SERVER_PORT`) is only needed by the server process.
 
+When [TLS is enabled](./reference#tls) via `tls.enabled` with valid `tls.key` and `tls.cert` paths,
+the UI/API server also listens on HTTPS on `GIT_PROXY_HTTPS_UI_PORT` (default `8444`) in parallel to
+the plain HTTP port. The same TLS credentials configured for the proxy are reused for the UI/API
+server.
+
 By default, GitProxy CLI connects to GitProxy running on localhost and default port. This can be
 changed by setting the `GIT_PROXY_UI_HOST` and `GIT_PROXY_UI_PORT` environment variables:
 

website/docs/deployment.mdx

@@ -172,7 +172,8 @@ The following environment variables can be set at container runtime:
 | Variable                 | Default      | Description                                              |
 | ------------------------ | ------------ | -------------------------------------------------------- |
 | `GIT_PROXY_SERVER_PORT`  | `8000`       | Proxy server port                                        |
-| `GIT_PROXY_UI_PORT`      | `8080`       | UI/API server port                                       |
+| `GIT_PROXY_UI_PORT`      | `8080`       | UI/API server port (HTTP)                                |
+| `GIT_PROXY_HTTPS_UI_PORT`| `8444`       | UI/API server port (HTTPS, active when `tls.enabled`)    |
 | `ALLOWED_ORIGINS`        | (empty)      | CORS allowed origins (comma-separated, or `*` for all)   |
 | `API_URL`                | (empty)      | API URL for the UI (leave empty for same-origin)         |
 | `NODE_ENV`               | `production` | Node environment                                         |
@@ -183,6 +184,7 @@ docker run -d \
   --name git-proxy \
   -p 8000:8000 \
   -p 8080:8080 \
+  -p 8444:8444 \
   -e GIT_PROXY_UI_PORT=8080 \
   -e ALLOWED_ORIGINS="https://gitproxy.example.com" \
   -e NODE_ENV=production \

website/docs/quickstart/intercept.mdx

@@ -62,7 +62,8 @@ git remote set-url origin http://localhost:8000/<YOUR-GITHUB-USERNAME>/git-proxy
 git remote -v
 ```
 
-You can also try HTTPS with `git -c http.sslVerify=false remote set-url origin https://localhost:8443/<YOUR-GITHUB-USERNAME>/git-proxy.git`
+You can also try HTTPS with `git -c http.sslVerify=false remote set-url origin https://localhost:8443/<YOUR-GITHUB-USERNAME>/git-proxy.git`.
+When TLS is enabled, the UI and REST API are also served over HTTPS on port `8444` (configurable via `GIT_PROXY_HTTPS_UI_PORT`) in parallel to the plain HTTP port `8080`.
 :::note
 
 SSH protocol is currently not supported, see [#27](https://github.com/finos/git-proxy/issues/27).