How to change email base_url to use "https://"?

It is hidden and enabled by default on new installs. You can drop into the rails console and check for it there:

./launcher enter app
rails c
SiteSetting.force_https
SiteSetting.force_https = true
exit
exit
exit