# This server block should listen on port 80 to warn users they tried to make an unsecure connection server { listen [::1]:42080 default_server; listen 127.0.0.1:42080 default_server; include inc/errors.conf; location / { return 403; # Don't allow unsecure HTTP requests } error_page 403 /http-messages/unsecure; location /.well-known/acme-challenge { root /srv/servnest/acme/; } }