server {
  server_name  source.garden;
  listen       80;
  listen       [::]:80;

  location ~ /\.well-known/acme-challenge {
    root       /var/lib/letsencrypt/;
  }
  location / {
    add_header Strict-Transport-Security "max-age=15768000; includeSubDomains" always;
    return     301 https://$server_name$request_uri;
  }
}

server {
  server_name  *.source.garden;
  listen       80;
  listen       [::]:80;

  location / {
    return     301 https://$server_name$request_uri;
  }
}


server {
  server_name www.source.garden;

  listen                    443 ssl http2;
  listen                    [::]:443 ssl http2;

  ssl_trusted_certificate   /etc/letsencrypt/live/source.garden-0002/chain.pem;
  ssl_certificate           /etc/letsencrypt/live/source.garden-0002/fullchain.pem;
  ssl_certificate_key       /etc/letsencrypt/live/source.garden-0002/privkey.pem;

  location / {
    return     301 https://source.garden$request_uri;
  }
}

server {
  server_name source.garden;

  listen                    443 ssl http2;
  listen                    [::]:443 ssl http2;

  ssl_trusted_certificate   /etc/letsencrypt/live/source.garden-0002/chain.pem;
  ssl_certificate           /etc/letsencrypt/live/source.garden-0002/fullchain.pem;
  ssl_certificate_key       /etc/letsencrypt/live/source.garden-0002/privkey.pem;

  location / {
    root /var/www/source.garden;
    autoindex on;
	charset utf-8;
  }
}