servnest-mkosi/mkosi.extra/etc/nginx/sites/http.conf

server {
	listen [::1]:42080 default_server;
	listen 127.0.0.1:42080 default_server;

	location / {
		return 403; # Don't allow unsecure HTTP requests
	}

	# Display an explanation page
	error_page 403 @http403;
	location @http403 {
		root /srv/niver/php/errors;
		try_files /http.php =500;
		index http.php;
		fastcgi_split_path_info ^(.+\.php)(/.+)$;
		fastcgi_pass unix:/run/php-fpm/errors.sock;
		include inc/fastcgi.conf;
	}

	location /.well-known/acme-challenge {
		alias /srv/niver/acme/;
	}
}