pid /tmp/nginx.pid;

http {
  resolver 172.16.0.1;
  types_hash_max_size 4096;
  ssl_certificate /etc/letsencrypt/live/kelder.zeus.ugent.be/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/kelder.zeus.ugent.be/privkey.pem;
  ssl_protocols TLSv1.2 TLSv1.3;
  ssl_prefer_server_ciphers on;
  charset utf-8;
  http2 on;
  gzip on;
  include mime.types;
  sendfile on;
  tcp_nodelay on;
  tcp_nopush on;
  ssl_stapling on;
  ssl_stapling_verify on;
  client_max_body_size 100M;
  proxy_read_timeout 600;
  proxy_send_timeout 600;
  include sites/*;
  server {
    listen 80;
    listen [::]:80;
	
    location / {
    	return 301 https://$host$request_uri;
    }
  }
  server {
    listen 443 ssl default_server;
    listen [::]:443 ssl default_server;
    location / {
      return 404;
    }
  }
}
events {
  worker_connections 1024;
}