Make sure that your PHP output links to the https
version of images and not the http version.
Could you please elaborate on this. Do I need create another 'location'?
I've noticed that when I assess admin side of my website
(http://mydomain.com/admin) the site is encrypted but the main one
(http://mydomain.com) is not.