NginX HTTP -> HTTPS redirection with LetsEncrypt

default.conf

server {
	server_tokens	off;
	server_name	_;
	listen		80	default_server;
	listen		[::]:80	default_server;

	set_real_ip_from	127.0.0.1;
	real_ip_header		X-Forwarded-For;

	access_log	/var/log/nginx/access.log;
	error_log	/var/log/nginx/error.log;

	root		/etc/letsencrypt/web;

	location / {
		return	301	https://$host$request_uri;
	}

	location /.well-known/ {
		try_files	$uri @redirect;
	}

	location @redirect {
		return	301	https://$host$request_uri;
	}
}

• default.conf replaces /etc/nginx/sites-available/default
• LetsEncrypt challenges must go below /etc/letsencrypt/web/.well-known/

See also: https://github.com/hilbix/gen/blob/master/letsencrypt.http