server {
    listen 80;
    server_name www.sub.domain.com sub.domain.com;

    # redirects both www and non-www to https
    return 301 https://sub.domain.com$request_uri;
}
server {

    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    server_name sub.domain.com;
       ssl_certificate ssl/xxx.pem;
    ssl_certificate_key ssl/xxx.key;
    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_prefer_server_ciphers on;
    ssl_ciphers 'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256';

    root /var/www/sub.domain.com/htdocs;
    index index.php index.html index.htm;
	include /etc/nginx/bots.d/ddos.conf;
 	include /etc/nginx/bots.d/blockbots.conf;

   include common/php73.conf;
   include common/acl.conf;

    include common/locations-wo.conf;
    include /var/www/domain.com/conf/nginx/*.conf;


    ##
    # Nginx Bad Bot Blocker Includes
    # REPO: https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker
    ##




    ##
    # Nginx Bad Bot Blocker Includes
    # REPO: https://github.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker
    ##



}