# HTTP → Weiterleitung auf HTTPS
server {
    if ($host = www.mail.marlonivo.com) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


    if ($host = mail.marlonivo.com) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


    listen 80;
    listen [::]:80;
    server_name mail.marlonivo.com www.mail.marlonivo.com;

    return 301 https://$host$request_uri;




}

# HTTPS → eigentliche Webseite (falls du eine ausliefern willst)
server {
    listen 443 ssl;
    listen [::]:443 ssl;
    server_name mail.marlonivo.com www.mail.marlonivo.com;

    root /var/www/mail;
    index index.html;
    ssl_certificate /etc/letsencrypt/live/mail.marlonivo.com/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/mail.marlonivo.com/privkey.pem; # managed by Certbot
    include             /etc/letsencrypt/options-ssl-nginx.conf;
    ssl_dhparam         /etc/letsencrypt/ssl-dhparams.pem;

    location / {
        try_files $uri $uri/ =404;
    }


}