nginx.conf

server {

    listen 80;

    server_name  site.usegalaxy.org.au site-maintenance.usegalaxy.org.au;
    access_log   /var/log/nginx/gms-maintenance.access.log;
    error_log    /var/log/nginx/gms-maintenance.error.log;

    root /srv/sites/gms-maintenance-site; # Symlink this

    location /static/ {
      alias /srv/sites/gms-maintenance-site/static/;
    }

    location = / {
      try_files /index.html = 404;
    }

    location / {
      return 302 $scheme://$host;
    }

    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/site.usegalaxy.org.au/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/site.usegalaxy.org.au/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}

server {

    if ($host = site.usegalaxy.org.au) {
        return 301 https://$host$request_uri;
    } # managed by Certbot

    listen 80;
    server_name site.usegalaxy.org.au;
    return 404; # managed by Certbot

}