pid /tmp/nginx.pid; http { resolver 172.16.0.1; types_hash_max_size 4096; ssl_certificate /etc/letsencrypt/live/kelder.zeus.ugent.be/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/kelder.zeus.ugent.be/privkey.pem; ssl_protocols TLSv1.2 TLSv1.3; ssl_prefer_server_ciphers on; charset utf-8; http2 on; gzip on; include mime.types; sendfile on; tcp_nodelay on; tcp_nopush on; ssl_stapling on; ssl_stapling_verify on; client_max_body_size 100M; proxy_read_timeout 600; proxy_send_timeout 600; include sites/*; server { listen 80; listen [::]:80; location / { return 301 https://$host$request_uri; } } server { listen 443 ssl default_server; listen [::]:443 ssl default_server; location / { return 404; } } } events { worker_connections 1024; }