From c792ea0bf88cd1fda5bfa6048c44027600060dc5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?P=C3=A5l-Kristian=20Hamre?= <pkhamre@gmail.com>
Date: Tue, 29 Jul 2025 19:54:46 +0200
Subject: [PATCH] 301 redirect.

---
 config/nginx/rstat.net-SSL.conf | 20 +++++++++++++++++++-
 1 file changed, 19 insertions(+), 1 deletion(-)

diff --git a/config/nginx/rstat.net-SSL.conf b/config/nginx/rstat.net-SSL.conf
index 1b0ad3a..792b489 100644
--- a/config/nginx/rstat.net-SSL.conf
+++ b/config/nginx/rstat.net-SSL.conf
@@ -2,7 +2,25 @@ server {
   listen 443 ssl;
   listen [::]:443 ssl;
 
-  server_name www.rstat.net rstat.net;
+  server_name www.rstat.net;
+  server_tokens off;
+
+  http2 on;
+
+  ssl_certificate /etc/nginx/ssl/live/www.rstat.net/fullchain.pem;
+  ssl_certificate_key /etc/nginx/ssl/live/www.rstat.net/privkey.pem;
+
+  # HSTS (ngx_http_headers_module is required) (63072000 seconds)
+  add_header Strict-Transport-Security "max-age=63072000" always;
+
+  return 301 https://rstat.net$request_uri;
+}
+
+server {
+  listen 443 ssl;
+  listen [::]:443 ssl;
+
+  server_name rstat.net;
   server_tokens off;
 
   http2 on;