server {
    listen       80  default_server;
    listen  [::]:80  default_server;

    location ~ /.well-known/acme-challenge/ {
        root /var/www/certbot/;
    }
}

server {
    listen       443 ssl default_server;
    listen  [::]:443 ssl default_server;

    ssl_reject_handshake on;
}