# http > https
server {
  listen 80;
  server_name savethetomato.org www.savethetomato.org savethistomato.org www.savethistomato.org;

  root /home/ikea_foundation_2026/week_2026/public_savethetomato;
    
  # Lets encrypt
  location ~ /.well-known {
    allow all;
  }

  location / {    
    return 301 https://ikeafoundation.org/ifw$request_uri;
  }   
}

# https
server {
  listen 443 ssl;
  http2 on;
  
  server_name savethetomato.org www.savethetomato.org savethistomato.org www.savethistomato.org;
      
  ssl_certificate /etc/letsencrypt/live/savethetomato.org/fullchain.pem; # managed by Certbot
  ssl_certificate_key /etc/letsencrypt/live/savethetomato.org/privkey.pem; # managed by Certbot
  include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
  ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

  location / {
    return 301 https://ikeafoundation.org/ifw$request_uri;
  }  
}