user www-data;
            worker_processes auto;
            pid /run/nginx.pid;
            include /etc/nginx/modules-enabled/*.conf;

            events {
                worker_connections 768;
                # multi_accept on;
            }

            http {

                ##
                # Basic Settings
                ##

                sendfile on;
                tcp_nopush on;
                tcp_nodelay on;
                keepalive_timeout 65;
                types_hash_max_size 2048;
                # server_tokens off;

                # server_names_hash_bucket_size 64;
                # server_name_in_redirect off;

                include /etc/nginx/mime.types;
                default_type application/octet-stream;

                ##
                # SSL Settings
                ##

                ssl_protocols TLSv1 TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE
                ssl_prefer_server_ciphers on;

                ##
                # Logging Settings
                ##

                access_log /var/log/nginx/access.log;
                error_log /var/log/nginx/error.log;

                ##
                # Gzip Settings
                ##

                gzip on;

                # gzip_vary on;
                # gzip_proxied any;
                # gzip_comp_level 6;
                # gzip_buffers 16 8k;
                # gzip_http_version 1.1;
                # gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;

                ##
                # Virtual Host Configs
                ##

                include /etc/nginx/conf.d/*.conf;
                include /etc/nginx/sites-enabled/*;
            }


            #mail {
            #   # See sample authentication script at:
            #   # http://wiki.nginx.org/ImapAuthenticateWithApachePhpScript
            #
            #   # auth_http localhost/auth.php;
            #   # pop3_capabilities "TOP" "USER";
            #   # imap_capabilities "IMAP4rev1" "UIDPLUS";
            #
            #   server {
            #       listen     localhost:110;
            #       protocol   pop3;
            #       proxy      on;
            #   }
            #
            #   server {
            #       listen     localhost:143;
            #       protocol   imap;
            #       proxy      on;
            #   }
            #}

proxy_set_header Host $http_host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto $scheme;

server {
                listen 80;
                listen [::]:80;

                root /var/www/example.com.au/html;
                return 301 https://$host$request_uri;
                index index.html;

                server_name example.com.au www.example.com.au;

                access_log /var/log/nginx/example.com.access.log;
                error_log /var/log/nginx/example.com.error.log;

            #    location / {
            #        try_files $uri $uri/ =404;
            #    }

            #    listen [::]:443 ssl ipv6only=on; # managed by Certbot
            #    listen 443 ssl; # managed by Certbot
            #    ssl_certificate /etc/letsencrypt/live/example.com.au/fullchain.pem; # managed by Certbot
            #    ssl_certificate_key /etc/letsencrypt/live/example.com.au/privkey.pem; # managed by Certbot
            #    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
            #    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

            }

            server {
                server_name example.com.au;
                listen 443 ssl;
                listen [::]:443 ssl;
                root /var/www/example.com.au/html;
                index index.html;
                ssl_certificate /etc/letsencrypt/live/example.com.au/fullchain.pem; # managed by Certbot
                ssl_certificate_key /etc/letsencrypt/live/example.com.au/privkey.pem;
             # managed by Certbot
            }

sudo ufw status
            Status: active

            To                         Action      From
            --                         ------      ----
            Nginx Full                 ALLOW       Anywhere
            443                        ALLOW       Anywhere
            Nginx Full (v6)            ALLOW       Anywhere (v6)
            443 (v6)                   ALLOW       Anywhere (v6)

/etc/letsencrypt/live/example.com.au/cert.pem
            /etc/letsencrypt/live/example.com.au/chain.pem
            /etc/letsencrypt/live/example.com.au/fullchain.pem
            /etc/letsencrypt/live/example.com.au/privkey.pem
            /etc/letsencrypt/live/example.com.au/README