server { listen 80; server_name nextcloud.csgalileo.org; server_tokens off; location /.well-known/acme-challenge { root /var/www; allow all; } location / { return 301 https://$server_name$request_uri; } } server { listen 443; server_name nnextcloud.csgalileo.org; ssl_certificate /etc/letsencrypt/live/nextcloud.csgalileo.org/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/nextcloud.csgalileo.org/privkey.pem; }