location / {
      include /etc/nginx/mime.types;
      root /opt/static/site;
      index index.html;
    }

    server_name _;
    return 301 https://$host$request_uri;

    ssl_certificate           /opt/nginx/aftok.crt;
    ssl_certificate_key       /opt/nginx/aftok.key;

    ssl_certificate           /etc/letsencrypt/live/aftok.com/fullchain.pem;
    ssl_certificate_key       /etc/letsencrypt/live/aftok.com/privkey.pem;

    }
    location /.well-known/ {
      allow all;
      alias /opt/static/well-known/;

    location /.well-known/acme-challenge/ {
      allow all;
      alias /opt/letsencrypt/;
    }