listen on * tls port 443

tls {
	certificate "/etc/ssl/maddaat.org.fullchain.pem"
	key "/etc/ssl/private/maddaat.org.key"
}

hsts preload