server {
	listen 443 ssl; # managed by Certbot
	listen [::]:443 ssl; # managed by Certbot

	server_name radio.tyil.nl;

	ssl_certificate /etc/letsencrypt/live/radio.tyil.nl/fullchain.pem;
	ssl_certificate_key /etc/letsencrypt/live/radio.tyil.nl/privkey.pem;

	include /etc/nginx/conf.d/certbot.conf;
	include /etc/nginx/conf.d/headers.conf;
	include /etc/nginx/conf.d/ssl.conf;

	location / {
		proxy_set_header Host            $host;
		proxy_set_header X-Forwarded-For $remote_addr;

		proxy_pass http://10.57.100.7;
	}
}

server {
	listen 80;
	listen [::]:80;

	server_name radio.tyil.nl;

	include /etc/nginx/conf.d/certbot.conf;
	include /etc/nginx/conf.d/headers.conf;

	location / {
		return 301 https://$host$request_uri;
	}
}