server { listen 80; listen [::]:80; listen 443 ssl deferred backlog=16384 reuseport http2; listen [::]:443 ssl deferred backlog=16384 reuseport http2; ssl_certificate /etc/ssl/certs/qa-tile.nominatim.openstreetmap.org.pem; ssl_certificate_key /etc/ssl/private/qa-tile.nominatim.openstreetmap.org.key; server_name qa-tile.nominatim.openstreetmap.org; root <%= @qa_data_directory %>/current; access_log <%= node[:nominatim][:logdir] %>/qa-tile.nominatim.openstreetmap.org-access.log combined; error_log <%= node[:nominatim][:logdir] %>/qa-tile.nominatim.openstreetmap.org-error.log; rewrite ^/\.well-known/acme-challenge/(.*)$ http://acme.openstreetmap.org/.well-known/acme-challenge/$1 permanent; location / { add_header Access-Control-Allow-Origin "*" always; } }