samwiseetc/nginx/sites-available/rush

server {
    listen  443 ssl;
    server_name rush.natalieandjoshua.com;
    root /var/www/rush;
    index index.php index.html index.htm;
    ssl_certificate           /etc/dehydrated/certs/rush.natalieandjoshua.com/fullchain.pem;
    ssl_certificate_key       /etc/dehydrated/certs/rush.natalieandjoshua.com/privkey.pem;
    ssl_protocols             TLSv1.2 TLSv1 TLSv1.1;

    location ~ ^.*/(?P<request_basename>[^/]+\.(mp3))$ {
        add_header Content-Disposition 'attachment; filename="$request_basename"';
    }
    error_log /var/log/nginx/rush.error;
    access_log /var/log/nginx/rush.access;

    location / {
        try_files $uri $uri/ /index.php;
    }

}
server {
    listen  443 ssl;
    server_name 5f3b42dd7a0ab1cb.natalieandjoshua.com;
	return 301 https://rush.natalieandjoshua.com$request_uri;
    ssl_certificate           /etc/dehydrated/certs/5f3b42dd7a0ab1cb.natalieandjoshua.com/fullchain.pem;
    ssl_certificate_key       /etc/dehydrated/certs/5f3b42dd7a0ab1cb.natalieandjoshua.com/privkey.pem;
    ssl_protocols             TLSv1.2 TLSv1 TLSv1.1;

    error_log /var/log/nginx/rush.error;
    access_log /var/log/nginx/rush.access;


}