# http > https
server {
  listen 80;
  server_name ikea-foundation-dice.onc.dk;

  root /home/mattias/www/ikea-foundation-dice/public;
    
  # Lets encrypt
  location ~ /.well-known {
    allow all;
  }

  location / {    
    return 301 https://ikea-foundation-dice.onc.dk$request_uri;
  }   
}



# https
server {
  listen 443 ssl;
  http2 on;

  server_name ikea-foundation-dice.onc.dk;

  ssl_certificate /etc/letsencrypt/live/ikea-foundation-dice.onc.dk/fullchain.pem; # managed by Certbot
  ssl_certificate_key /etc/letsencrypt/live/ikea-foundation-dice.onc.dk/privkey.pem; # managed by Certbot
  include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
  ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

  root /home/mattias/www/ikea-foundation-dice/public;
  index index.html;

  access_log  /home/mattias/www/ikea-foundation-dice/log/httpd-access.log;
  error_log   /home/mattias/www/ikea-foundation-dice/log/httpd-errors.log;  


  location / {
    try_files $uri $uri/ =404;
  }
}