ansible/roles/nginx/forward/templates/forward.conf

server {
  listen 443 ssl http2;
  listen [::]:443 ssl http2;
  server_name {{ effective_domain }};

  ssl on;
  ssl_certificate {{ acme_fullchain_location }};
  ssl_certificate_key {{ acme_key_location }};

  include {{ nginx_snippets_directory }}/https;
  include {{ nginx_snippets_directory }}/global;

  return 301 https://{{ dest }}$request_uri;
}