server { listen 80; listen [::]:80; server_name HOST_NAME; return 301 https://$server_name$request_uri; } server { listen 443 ssl; listen [::]:443 ssl; # Add index.php to the list if you are using PHP server_name HOST_NAME; root /var/www/HOST_NAME; index index.php; location / { # First attempt to serve request as file, then # as directory, then fall back to displaying a 404. try_files $uri $uri/ /index.php?$args; } location ~ \.php$ { # include snippets/fastcgi-php.conf; include fastcgi_params; # With php-fpm (or other unix sockets): fastcgi_pass unix:/run/php/php-fpm.sock; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; fastcgi_param PATH_INFO $fastcgi_path_info; } ssl_certificate /etc/letsencrypt/live/HOST_NAME/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/HOST_NAME/privkey.pem; include /etc/letsencrypt/options-ssl-nginx.conf; ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; }