local rootDir, domain = ...

%>
	server {
		server_name <%=domain%>;
		listen 80;
		listen [::]:80;

		location / {
			return 301 https://$http_host$request_uri;
		}

		location /.well-known/acme-challenge/ {
			alias <%=rootDir%>/sites/$host/acme-challenge/;
			autoindex on;
		}
	}

	server {
		server_name <%=domain%>;
		listen 443 ssl;
		listen [::]:443 ssl;

		if ($host != $server_name) {
			return 301 http://$http_host$request_uri;
		}

		ssl_certificate <%=rootDir%>/sites/<%=domain%>/fullchain.cer;
		ssl_certificate_key <%=rootDir%>/sites/<%=domain%>/<%=domain%>.key;
		include <%=rootDir%>/local/nginx.default.conf;
	}
<%