default.conf

server {
        listen 80;
        
        
        root /usr/share/nginx/html;
        
        
        server_name tweaxy.gleeze.com;
        
        location ~ /.well-known/acme-challenge{
           allow all;
           root /usr/share/nginx/html/letsencrypt;
        }
        location / {
        return 301 https://tweaxy.gleeze.com$request_uri;
        }
}
server {
     listen 443 ssl http2;
     server_name tweaxy.gleeze.com;
     root /usr/share/nginx/html;

     server_tokens off;
     ssl_certificate /etc/nginx/ssl/live/tweaxy.gleeze.com/fullchain.pem;
     ssl_certificate_key /etc/nginx/ssl/live/tweaxy.gleeze.com/privkey.pem;
     ssl_dhparam /etc/nginx/dhparam/dhparam-2048.pem;
     
     ssl_buffer_size 8k;
     ssl_protocols TLSv1.2 TLSv1.1 TLSv1;
     ssl_prefer_server_ciphers on;
     ssl_ciphers ECDH+AESGCM:ECDH+AES256:ECDH+AES128:DH+3DES:!ADH:!AECDH:!MD5;

    location / {
          try_files $uri $uri/ /index.html;
    }

}