servnest-mkosi/install/nginx/sites/http.conf

# This server block should listen on port 80 to warn users they tried to make an unsecure connection

server {
	listen [::1]:42080 default_server;
	listen 127.0.0.1:42080 default_server;

	location / {
		return 403; # Don't allow unsecure HTTP requests
	}

	# Display an explanation page
	error_page 403 @http403;
	location @http403 {
		root /srv/servnest/errors;
		try_files /http.php =500;
		index http.php;
		fastcgi_split_path_info ^(.+\.php)(/.+)$;
		fastcgi_pass unix:/run/php-fpm/servnest.sock;
		include inc/fastcgi.conf;
	}

	location /.well-known/acme-challenge {
		root /srv/servnest/acme/;
	}
}