map $http_user_agent $myindex { default /index.html; ~curl /ascii.txt; } server { listen 443 quic; listen [::]:443 quic; listen 443 ssl; listen [::]:443 ssl; listen 80; listen [::]:80; server_name eatfish.png.swee.codes; root /var/www/eatfish.png.swee.codes; index $myindex; if ($do_upgrade) { return 302 https://$host$request_uri; } location / { try_files $uri $uri/ =404; } location /.git { return 403; } ssl_certificate /etc/letsencrypt/live/swee.codes/fullchain.pem; # managed by Certbot ssl_certificate_key /etc/letsencrypt/live/swee.codes/privkey.pem; # managed by Certbot include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot }