server { server_name heystefan.com www.heystefan.com; root /var/www/heystefan.com; index index.html; location / { try_files $uri $uri/ =404; } listen [::]:443 ssl ipv6only=on; # managed by Certbot listen 443 ssl; # managed by Certbot ssl_certificate /etc/letsencrypt/live/heystefan.com-0001/fullchain.pem; # managed by Certbot ssl_certificate_key /etc/letsencrypt/live/heystefan.com-0001/privkey.pem; # managed by Certbot include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot } server { if ($host ~ ^[^.]+\.heystefan\.com$) { return 301 https://$host$request_uri; } # managed by Certbot if ($host = heystefan.com) { return 301 https://$host$request_uri; } # managed by Certbot listen 80; listen [::]:80; server_name heystefan.com; return 404; # managed by Certbot }