server { listen 443 ssl http2; server_name bloat.vern.cc; if ($https = '') { return 301 https://$host$request_uri; } # if not connected to HTTPS, perma-redirect to HTTPS include snippets/lets-encrypt.conf; include common/bloat.conf; }