server {
	server_name photos.theribbles.org;

	listen [::]:443 ssl; # managed by Certbot
	listen 443 ssl; # managed by Certbot

	ssl_certificate /etc/letsencrypt/live/theribbles.org/fullchain.pem; # managed by Certbot
	ssl_certificate_key /etc/letsencrypt/live/theribbles.org/privkey.pem; # managed by Certbot
	include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
	ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

	location / {
		proxy_pass http://127.0.0.1:10080;

		include "/etc/nginx/proxy-photo-upload.conf";
		proxy_buffering off;
		proxy_set_header Upgrade $http_upgrade;
		proxy_set_header Connection "upgrade";
	}
}

server {
	if ($host = photos.theribbles.org) {
		return 301 https://$host$request_uri;
	} # managed by Certbot

	listen 80;
	listen [::]:80;
	
	server_name photos.theribbles.org;
	return 404; # managed by Certbot
}