server { listen 443 ssl; server_name rss.natalieandjoshua.com; root /var/www/html; index index.php index.html index.htm; ssl_certificate /etc/dehydrated/certs/rss.natalieandjoshua.com/fullchain.pem; ssl_certificate_key /etc/dehydrated/certs/rss.natalieandjoshua.com/privkey.pem; ssl_protocols TLSv1.2 TLSv1 TLSv1.1; location ~ ^.*/(?P[^/]+\.(mp3))$ { add_header Content-Disposition 'attachment; filename="$request_basename"'; } error_log /var/log/nginx/rss.error; access_log /var/log/nginx/rss.access; location / { try_files $uri $uri/ /index.php; } }