diff --git a/default b/default
index 81cbe8c..83c5658 100644
--- a/default
+++ b/default
@@ -1,7 +1,23 @@
 server {
-  listen 80 default_server;
-  listen [::]:80 default_server;
-  server_name _;
+    server_name _; # managed by Certbot
 
-  return 301 https://ionathan.ch;
+    return 302 https://ionathan.ch;
+
+    listen [::]:443 ssl ipv6only=on; # managed by Certbot
+    listen 443 ssl; # managed by Certbot
+    ssl_certificate /etc/letsencrypt/live/git.ionchy.ca/fullchain.pem; # managed by Certbot
+    ssl_certificate_key /etc/letsencrypt/live/git.ionchy.ca/privkey.pem; # managed by Certbot
+    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
+}
+
+server {
+    if ($host = ionchy.ca) {
+        return 301 https://$host$request_uri;
+    } # managed by Certbot
+
+    listen 80 default_server;
+    listen [::]:80 default_server;
+    server_name _;
+    return 404; # managed by Certbot
 }