server {
    listen       80;
    listen       [::]:80;
    server_name  _;
    return 301 https://$host$request_uri;
}

server {
    listen       443 ssl;
    listen       [::]:443 ssl;
    server_name  _;
    include      ssl.conf;

    # 404 also points at /50x.html: the page is a "Loading…" screen
    # with a meta-refresh, so the early-boot window where the Go
    # backend isn't up yet (and any other transient 404 / 5xx) self-
    # recovers as soon as upstream comes back.
    error_page   404 500 502 503 504  /50x.html;
    location = /50x.html {
	root   html;
    }

    include /etc/nginx/app/*.conf;
}