access_log /var/log/nginx/mydomain.com_access_log main; error_log /var/log/nginx/mydomain.com_error_log info; # simple catch-all server for the domain server { # respond both to local, internal, IP directly and to mydomain.com server_name 10.0.0.1 mydomain.com; # Port for users from outside listen 8443 ssl; # Port for users from inside listen 443 ssl; http2 on; # unauthenticated static landing page (maybe a "get off my lawn" GIF...) location / { root /var/www/html; } # include all sub-paths for mydomain.com: include serviceX.conf } # include all sub-domains entry points: include com.mydomain/y/y.conf; # include HTTPS certs stuff: include com.mydomain/certbot.conf;