Unify configs, enhance SSL security

meinetu.at.conf

@@ -1,11 +1,11 @@
 # -*-nginx-*-
-
-server	{
-    listen		80;
+server {
+    listen 80;
     server_name meinetu.at www.meinetu.at;
-    root	/srv/welcome;  
+
     location /.well-known {
-	allow all;
+        root /srv/welcome;
+        allow all;
     }
     location / {
         return 301 https://$host$request_uri;
@@ -18,18 +18,14 @@ server {
 
     ssl_certificate /etc/letsencrypt/live/triton.fet.at/fullchain.pem;
     ssl_certificate_key /etc/letsencrypt/live/triton.fet.at/privkey.pem;
+    ssl_trusted_certificate /etc/letsencrypt/live/triton.fet.at/chain.pem;
+
+    include snippets/ssl.conf;
+#    include snippets/ldap.conf
 
- #   auth_ldap "FET Login";
- #   auth_ldap_servers fet;
     root /srv/meinetu;
-    
-#    root /srv/welcome;
     location / {
         return 503;
         index index.html;
     }
-    location /.well-known {
-    	allow all;
-    }
-
 }