server "nfsw.dingy.space" {
        listen on * port 80
        location "/.well-known/acme-challenge/*" {
                root "/acme"
                request strip 2
        }
        location * {
                block return 302 "https://$HTTP_HOST$REQUEST_URI"
        }
}

server "nfsw.dingy.space" {
        listen on * tls port 443
        tls {
                certificate "/etc/ssl/nfsw.dingy.space.fullchain.pem"
                key "/etc/ssl/private/nfsw.dingy.space.key"
        }
        location "/.well-known/acme-challenge/*" {
                root "/acme"
                request strip 2
        }

        fastcgi socket ":4201"
}