Add some self-signed TSL certs to test https

conf/nginx.conf

@@ -8,12 +8,23 @@ events {
 http {
     server {
         listen 80;
-        # listen 443 ssl;
+        return 301 https://$host$request_uri;
+    }
+
+    server {
+        listen 443 ssl;
 
         include mime.types;
         charset utf-8;
         default_type text/html;
 
+        ssl_certificate /var/www/certs/miti.sh/fullchain.pem;
+        ssl_certificate_key /var/www/certs/miti.sh/privkey.pem;
+
+        location ^~ /.well-known/acme-challenge {
+            alias /var/www/dehydrated;
+        }
+
         try_files $uri $uri/ $uri.html =404;
 
         # return `/posts/index.html` from `/posts`
@@ -33,8 +44,13 @@ http {
     }
 
     server {
+        listen 443 ssl;
         server_name git.miti.sh;
 
+        location ^~ /.well-known/acme-challenge {
+            alias /var/www/dehydrated;
+        }
+
         location / {
             client_max_body_size 1024M;
             proxy_pass http://unix:/run/gitea/gitea.socket;