ssl = yes
ssl_server {
  cert_file = /etc/letsencrypt/live/[ ... domain ... ]/fullchain.pem
  key_file = /etc/letsencrypt/live/[ ... domain ... ]/privkey.pem
}