server {
        server_name site.ru;
        listen 80;
listen *:443 ssl;
                ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_certificate /etc/letsencrypt/live/site.ru/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/site.ru/privkey.pem;
        if ($scheme != "https") {
                rewrite ^ https://$http_host$request_uri? permanent;
                }

        if ($request_uri ~ "^(.*)index.(?:php|html)") {
                        return 301 $1;
        }