fix: conventional paths, oolon fqdn, public cert

asset/manifest.yml

@@ -32,8 +32,8 @@ environments:
           GITHUB_TOKEN: github.com/grenade/admin-token
           # GITEA_TOKEN, BUGZILLA_API_KEY: optional, omit unless required.
       web:
-        hosts: [oolon.hanzalova.internal]
+        hosts: [oolon.kosherinata.internal]
         config:
           server_name: rob.tn
-          root: /var/www/moments
+          root: /var/www/rob.tn
           api_upstream: http://nikola.kosherinata.internal:42424

asset/nginx/rob.tn.conf

@@ -4,15 +4,15 @@ upstream moments_api {
 }
 
 server {
-    listen 443 ssl http2;
-    listen [::]:443 ssl http2;
     server_name rob.tn;
+    listen 443 ssl;
+    http2 on;
 
-    ssl_certificate     /etc/pki/tls/misc/oolon.hanzalova.internal.pem;
-    ssl_certificate_key /etc/pki/tls/private/oolon.hanzalova.internal.pem;
-    ssl_protocols TLSv1.3;
+    ssl_certificate /etc/letsencrypt/live/rob.tn/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/rob.tn/privkey.pem;
+    ssl_protocols TLSv1.2 TLSv1.3;
 
-    root /var/www/moments;
+    root /var/www/rob.tn;
     index index.html;
 
     location / {
@@ -41,10 +41,3 @@ server {
     access_log /var/log/nginx/rob.tn.access.log;
     error_log  /var/log/nginx/rob.tn.error.log;
 }
-
-server {
-    listen 80;
-    listen [::]:80;
-    server_name rob.tn;
-    return 301 https://$host$request_uri;
-}