server {
	listen 443 ssl http2; # managed by Certbot
	listen [::]:443 ssl http2; # managed by Certbot

	server_name www.tyil.nl;

	ssl_certificate /etc/letsencrypt/live/www.tyil.nl/fullchain.pem;
	ssl_certificate_key /etc/letsencrypt/live/www.tyil.nl/privkey.pem;

	include /etc/nginx/conf.d/certbot.conf;
	include /etc/nginx/conf.d/headers.conf;
	include /etc/nginx/conf.d/ssl.conf;

	root /var/www/nl.tyil.www/public;

	error_page 404 /http-404.html;

	location /atom.xml {
		return 301 https://www.tyil.nl/posts/index.xml;
	}

	location / {
		try_files $uri $uri/ =404;
	}
}

server {
	listen 80;
	listen [::]:80;

	server_name www.tyil.nl;

	include /etc/nginx/conf.d/certbot.conf;
	include /etc/nginx/conf.d/headers.conf;

	location / {
		return 301 https://$host$request_uri;
	}
}