# Temporary: HTTP only for initial Let's Encrypt webroot challenge. # Replace with ia.enso.4nkweb.com.conf after cert exists under live/ia.enso.4nkweb.com/. server { listen 80; server_name ia.enso.4nkweb.com; location /.well-known/acme-challenge/ { root /var/www/certbot; } location / { return 301 https://$host$request_uri; } }