server {
	listen 80;
	listen [::]:80;
	server_name {{ fqdn }};

	return 301 https://$host$request_uri;
}

server {
	listen 443 ssl;
	listen [::]:443 ssl;
	server_name {{ fqdn }};

	ssl_certificate /etc/letsencrypt/live/{{ fqdn }}/fullchain.pem;
	ssl_certificate_key /etc/letsencrypt/live/{{ fqdn }}/privkey.pem;

	location / {
		uwsgi_pass unix:/run/friwall.socket;
		include uwsgi_params;
	}
}