# This server block should listen on port 80 to warn users they tried to make an unsecure connection server { listen [::1]:42080 default_server; listen 127.0.0.1:42080 default_server; location / { return 403; # Don't allow unsecure HTTP requests } # Display an explanation page error_page 403 @http403; location @http403 { root /srv/servnest/errors; try_files /http.php =500; index http.php; fastcgi_split_path_info ^(.+\.php)(/.+)$; fastcgi_pass unix:/run/php-fpm/servnest.sock; include inc/fastcgi.conf; } location /.well-known/acme-challenge { root /srv/servnest/acme/; } }