thoughtpolice

let
  # Wrap a nginx server block in an HTTPS site
  wrapSSL = site: cert: key: block: ''
    server {
        listen      80;
        listen [::]:80;
        server_name ${site};

        location /nginx_status {
            stub_status  on;