Yes, to both questions.

1. You can enable HTTPS in the JVM using Spring Boot's configuration properties, or use nginx instead.
   https://github.com/Erudika/scoold#self-hosting-para-and-scoold-through-ssl

2. The Para Web Console is an open source project - simply clone it and use it however you like. It's 100% client-side, so it doesn't really matter if you host it locally or not.
   https://github.com/erudika/para-admin-ui