Always redirect to https.

Dependencies

• [2] NJNMO72S Add zcash.com submodule and update client to modern halogen.
• [3] GMYPBCWE Make docker-compose work.
• [4] XZLSHL4D The server is now (tenuously) running, and serving pages via SSL!
• [5] NSRSSSTR Update nginx.conf, make aftok host configurable for cli scripts.
• [6] 5FLAK3ME Fix nginx mime types.

Change contents

• replacement in conf/nginx/conf/nginx.conf at line 20
  [3.33]→[3.33:51](∅→∅),[3.51]→[3.844:881](∅→∅),[3.881]→[2.309168:309197](∅→∅),[2.309197]→[3.75:105](∅→∅),[3.75]→[3.75:105](∅→∅)
  −

  − location / {

  − include /etc/nginx/mime.types;

  − root /opt/static/site;

  − index index.html;

  − }
  [3.33]

  [3.457]
  + server_name _;

  + return 301 https://$host$request_uri;
• replacement in conf/nginx/conf/nginx.conf at line 28
  [3.517]→[3.1771:1875](∅→∅)
  − ssl_certificate /opt/nginx/aftok.crt;

  − ssl_certificate_key /opt/nginx/aftok.key;
  [3.517]

  [3.621]
  + ssl_certificate /etc/letsencrypt/live/aftok.com/fullchain.pem;

  + ssl_certificate_key /etc/letsencrypt/live/aftok.com/privkey.pem;
• edit in conf/nginx/conf/nginx.conf at line 42
  [2.309253]

  [2.309253]
  + }

  +

  + location /.well-known/ {

  + allow all;

  + alias /opt/static/well-known/;
• edit in conf/nginx/conf/nginx.conf at line 49
  [2.309260]

  [2.309260]
  + location /.well-known/acme-challenge/ {

  + allow all;

  + alias /opt/letsencrypt/;

  + }

  +