Yes, to both questions.
You can enable HTTPS in the JVM using Spring Boot's configuration properties, or use nginx instead. https://github.com/Erudika/scoold#self-hosting-para-and-scoold-through-ssl
The Para Web Console is an open source project - simply clone it and use it however you like. It's 100% client-side, so it doesn't really matter if you host it locally or not. https://github.com/erudika/para-admin-ui