listen 443 ssl;
ssl_certificate /etc/letsencrypt/live/$SERVICE/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/$SERVICE/privkey.pem;
