server {
                server_name foo.de;
                return 301 https://$server_name$request_uri;
        }

        server {

                listen 443 ssl;
            server_name foo.de;


            location /.well-known {
                alias /var/www/foo.de/.well-known;
        autoindex on;
            }

            include snippets/ssl-foo.de.conf;

            ssl_stapling on;
            ssl_stapling_verify on;

            # Uncomment this line only after testing in browsers,
            # as it commits you to continuing to serve your site over HTTPS
            # in future
            # add_header Strict-Transport-Security "max-age=31536000";

            location / {
                proxy_pass http://localhost:3123;
                proxy_set_header Host      $host;
                proxy_set_header X-Real-IP $remote_addr;
           }
       }


# snippets/ssl-foo.de.conf;

ssl_certificate /etc/letsencrypt/live/foo.de/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/foo.de/privkey.pem;