How to enable HTTPS on Suite & REST API?

Currently I don't see a way to login to the Suite securely, or make calls to the REST API, and can't see anything in the documentation (apart from using the REd Hat SSO solution which we don't want to do).

I'm using the bpms-install-demo docker container and wondering if that just doesn't have the more secure options enabled.

Can someone tell me if this is possible or if I'm doing something wrong etc?

Thanks
Duncan