diff --git a/config/nginx_savethetomato_org.conf b/config/nginx_savethetomato_org.conf new file mode 100644 index 0000000..1bd993b --- /dev/null +++ b/config/nginx_savethetomato_org.conf @@ -0,0 +1,36 @@ +# http > https +server { + listen 80; + server_name savethetomato.org www.savethetomato.org savethistomato.org www.savethistomato.org; + + root /home/ikea_foundation_2026/week_2026/public_savethetomato; + + # Lets encrypt + location ~ /.well-known { + allow all; + } + + location / { + return 301 https://savethetomato.ikeafoundation.org$request_uri; + } +} + +# https +server { + listen 443 ssl; + http2 on; + + server_name savethetomato.org www.savethetomato.org savethistomato.org www.savethistomato.org; + + ssl_certificate /etc/letsencrypt/live/savethetomato.org/fullchain.pem; # managed by Certbot + ssl_certificate_key /etc/letsencrypt/live/savethetomato.org/privkey.pem; # managed by Certbot + include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot + ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot + + location / { + return 301 https://savethetomato.ikeafoundation.org$request_uri; + } +} + + +