server {
    listen *:80;
    listen [::]:80;

    server_name _;

    # Forward for certbot
    location /.well-known/acme-challenge/ {
        root /usr/share/nginx/html;
    }

    # Everything else -> ssl
    location / {
        return 301 https://$host$request_uri;
    }
}