server { listen 443 ssl http2; listen [::]:443 ssl http2; server_name ${DOMAIN}; ${HTTPS_SEGMENT} } server { listen 80; listen [::]:80; server_name ${DOMAIN}; ${HTTP_SEGMENT} location /.well-known/acme-challenge { root /srv/acme; } }