server { listen 80; server_name {{.fqdn}}; server_tokens off; return 301 https://{{.fqdn}}$request_uri; } server { server_name {{.fqdn}}; listen 443 ssl http2; ssl_certificate /etc/nginx/certs/{{.fqdn}}/cert.pem; ssl_certificate_key /etc/nginx/certs/{{.fqdn}}/key.pem; server_tokens off; location / { root {{.root}}; try_files $uri $uri/ =404; autoindex off; } }