server {
  listen [::]:443 quic reuseport;
  listen 443 quic reuseport;
  listen [::]:443 ssl;
  listen 443 ssl;

  server_name www.secure.server.localhost;

  include h5bp/tls/ssl_engine.conf;
  include h5bp/tls/certificate_files.conf;
  include h5bp/tls/policy_balanced.conf;

  return 301 $scheme://secure.server.localhost$request_uri;
}

server {
  listen [::]:443 quic reuseport;
  listen 443 quic reuseport;
  listen [::]:443 ssl;
  listen 443 ssl;

  server_name secure.server.localhost;

  include h5bp/tls/ssl_engine.conf;
  include h5bp/tls/certificate_files.conf;
  include h5bp/tls/policy_balanced.conf;

  root /var/www/server.localhost;

  include h5bp/basic.conf;
  include h5bp/errors/custom_errors.conf;

  include h5bp/security/strict-transport-security.conf;
}