server { listen 443 ssl; server_name rush.natalieandjoshua.com; root /var/www/rush; index index.php index.html index.htm; ssl_certificate /etc/dehydrated/certs/rush.natalieandjoshua.com/fullchain.pem; ssl_certificate_key /etc/dehydrated/certs/rush.natalieandjoshua.com/privkey.pem; ssl_protocols TLSv1.2 TLSv1 TLSv1.1; location ~ ^.*/(?P[^/]+\.(mp3))$ { add_header Content-Disposition 'attachment; filename="$request_basename"'; } error_log /var/log/nginx/rush.error; access_log /var/log/nginx/rush.access; location / { try_files $uri $uri/ /index.php; } } server { listen 443 ssl; server_name 5f3b42dd7a0ab1cb.natalieandjoshua.com; return 301 https://rush.natalieandjoshua.com$request_uri; ssl_certificate /etc/dehydrated/certs/5f3b42dd7a0ab1cb.natalieandjoshua.com/fullchain.pem; ssl_certificate_key /etc/dehydrated/certs/5f3b42dd7a0ab1cb.natalieandjoshua.com/privkey.pem; ssl_protocols TLSv1.2 TLSv1 TLSv1.1; error_log /var/log/nginx/rush.error; access_log /var/log/nginx/rush.access; }