server {
    listen 443 ssl http2;
    server_name example.test;
    ssl_certificate     /etc/ssl/example.test/fullchain.pem;
    ssl_certificate_key /etc/ssl/example.test/privkey.pem;
    ssl_protocols TLSv1.2 TLSv1.3;
    add_header Strict-Transport-Security "max-age=31536000" always;
    location / { root /var/www/example; try_files $uri $uri/ =404; }
}
server { listen 80; server_name example.test; return 301 https://$host$request_uri; }