server {
	server_name todo.theribbles.org;

	listen [::]:443 ssl; # managed by Certbot
	listen 443 ssl; # managed by Certbot
	ssl_certificate /etc/letsencrypt/live/theribbles.org/fullchain.pem; # managed by Certbot
	ssl_certificate_key /etc/letsencrypt/live/theribbles.org/privkey.pem; # managed by Certbot
	include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
	ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

	location / {
		root /var/opt/todo/frontend/current;
		try_files $uri $uri/ /;
		index index.html index.htm;
	}
	location ~* ^/(api|dav|\.well-known)/ {
		proxy_pass http://localhost:3456;
		include /etc/nginx/proxy.conf;
	}
}

server {
	if ($host = todo.theribbles.org) {
		return 301 https://$host$request_uri;
	} # managed by Certbot


	listen 80;
	listen [::]:80;

	server_name todo.theribbles.org;
	return 404; # managed by Certbot
}