From dddc247701412b9ef1d08aabc8f94a4506e36c06 Mon Sep 17 00:00:00 2001
From: Naomi Carrigan <commits@nhcarrigan.com>
Date: Wed, 26 Feb 2025 16:09:13 -0800
Subject: [PATCH] feat: clean up config, alphabetise prod

---
 configs/matrix.conf |   2 +-
 configs/prod.conf   | 874 ++++++++++++++++++++++----------------------
 2 files changed, 441 insertions(+), 435 deletions(-)

diff --git a/configs/matrix.conf b/configs/matrix.conf
index 7ec8718..bb3e125 100644
--- a/configs/matrix.conf
+++ b/configs/matrix.conf
@@ -8,7 +8,7 @@ server {
     # Root path redirect only for port 443
     location = / {
         if ($server_port = 443) {
-            return 301 https://chat.nhcarrigan.com;
+            return 301 https://matrix.to/#/#home:matrix.nhcarrigan.com;
         }
     }
 
diff --git a/configs/prod.conf b/configs/prod.conf
index ac934d7..94a648d 100644
--- a/configs/prod.conf
+++ b/configs/prod.conf
@@ -1,3 +1,16 @@
+server {
+  listen 443 ssl;
+  server_name afp.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/afp.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/afp.nhcarrigan.com/privkey.pem;
+
+  location / {
+    proxy_set_header Host $host;
+    proxy_pass https://127.0.0.1:10443;
+    proxy_redirect off;
+  }
+}
+
 server {
   listen 443 ssl;
   server_name alerts.nhcarrigan.com;
@@ -13,15 +26,31 @@ server {
 
 server {
   listen 443 ssl;
-  server_name irc-private.nhcarrigan.com;
-  ssl_certificate /etc/letsencrypt/live/irc-private.nhcarrigan.com/fullchain.pem;
-  ssl_certificate_key /etc/letsencrypt/live/irc-private.nhcarrigan.com/privkey.pem;
+  server_name analytics.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/analytics.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/analytics.nhcarrigan.com/privkey.pem;
 
-    location / {
-        proxy_set_header Host $host;
-        proxy_pass http://127.0.0.1:9000;
-        proxy_redirect off;
-    }
+  location / {
+    proxy_set_header Host $host;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_pass http://127.0.0.1:11080;
+  }
+
+  location = /live/websocket {
+    proxy_pass http://127.0.0.1:11080;
+    proxy_http_version 1.1;
+    proxy_set_header Upgrade $http_upgrade;
+    proxy_set_header Connection "Upgrade";
+  }
+}
+
+server {
+  listen 443 ssl;
+  server_name announcements.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/announcements.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/announcements.nhcarrigan.com/privkey.pem;
+
+  return 301 https://forum.nhcarrigan.com/c/announcements/14;
 }
 
 server {
@@ -37,332 +66,19 @@ server {
   }
 }
 
-server {
-    listen 443 ssl;
-    server_name naomi.party;
-    ssl_certificate /etc/letsencrypt/live/naomi.party/fullchain.pem;
-    ssl_certificate_key /etc/letsencrypt/live/naomi.party/privkey.pem;
-
-    root /home/nhcarrigan/bsky;
-    
-    location / {
-        index index.html;
-    }
-}
-
 server {
   listen 443 ssl;
-  server_name forms.nhcarrigan.com;
-  ssl_certificate /etc/letsencrypt/live/forms.nhcarrigan.com/fullchain.pem;
-  ssl_certificate_key /etc/letsencrypt/live/forms.nhcarrigan.com/privkey.pem;
-
-  root /home/nhcarrigan/forms;
-
-  location / {
-    index index.html;
-  }
-
-  location /appeal {
-    try_files /appeal.html =404;
-  }
-
-  location /contact {
-    try_files /contact.html =404;
-  }
-
-  location /commission {
-    try_files /commission.html =404;
-  }
-
-  location /staff {
-    try_files /staff.html =404;
-  }
-
-  location /events {
-    try_files /events.html =404;
-  }
-
-  location /session {
-    try_files /session.html =404;
-  }
-
-  location /mentorship {
-    try_files /mentorship.html =404;
-  }
-}
-
-server {
-  listen 443 ssl;
-  server_name moderation.nhcarrigan.com;
-  ssl_certificate /etc/letsencrypt/live/moderation.nhcarrigan.com/fullchain.pem;
-  ssl_certificate_key /etc/letsencrypt/live/moderation.nhcarrigan.com/privkey.pem;
+  server_name becca.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/becca.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/becca.nhcarrigan.com/privkey.pem;
 
   location / {
     proxy_set_header Host $host;
-    proxy_pass http://127.0.0.1:12443;
+    proxy_pass http://127.0.0.1:5010;
     proxy_redirect off;
   }
 }
 
-server {
-  listen 443 ssl;
-  server_name announcements.nhcarrigan.com;
-  ssl_certificate /etc/letsencrypt/live/announcements.nhcarrigan.com/fullchain.pem;
-  ssl_certificate_key /etc/letsencrypt/live/announcements.nhcarrigan.com/privkey.pem;
-
-  location / {
-    proxy_set_header Host $host;
-    proxy_pass http://127.0.0.1:3002;
-    proxy_redirect off;
-  }
-}
-
-server {
-  listen 443 ssl;
-  server_name blog.nhcarrigan.com;
-  ssl_certificate /etc/letsencrypt/live/blog.nhcarrigan.com/fullchain.pem;
-  ssl_certificate_key /etc/letsencrypt/live/blog.nhcarrigan.com/privkey.pem;
-
-  location / {
-    proxy_set_header Host $host;
-    proxy_pass http://127.0.0.1:3003;
-    proxy_redirect off;
-  }
-}
-
-server {
-   listen 443 ssl;
-   server_name security.nhcarrigan.com;
-   ssl_certificate /etc/letsencrypt/live/security.nhcarrigan.com/fullchain.pem;
-   ssl_certificate_key /etc/letsencrypt/live/security.nhcarrigan.com/privkey.pem;
-
-   root /home/nhcarrigan/security;
-
-   location / {
-      index index.html;
-   }
-}
-
-server {
-    listen 443 ssl;
-    server_name nhcarrigan.link;
-    ssl_certificate /etc/letsencrypt/live/nhcarrigan.link/fullchain.pem;
-    ssl_certificate_key /etc/letsencrypt/live/nhcarrigan.link/privkey.pem;
-
-    root /home/nhcarrigan/link-redirector;
-
-    location / {
-        index index.html;
-    }
-}
-
-server {
-    listen 443 ssl;
-    server_name games.nhcarrigan.com;
-    ssl_certificate /etc/letsencrypt/live/games.nhcarrigan.com/fullchain.pem;
-    ssl_certificate_key /etc/letsencrypt/live/games.nhcarrigan.com/privkey.pem;
-
-    root /home/nhcarrigan/games;
-
-    location / {
-       index index.html;
-    }
-}
-
-server {
-  listen 443 ssl;
-  server_name hooks.nhcarrigan.com;
-  ssl_certificate /etc/letsencrypt/live/hooks.nhcarrigan.com/fullchain.pem;
-  ssl_certificate_key /etc/letsencrypt/live/hooks.nhcarrigan.com/privkey.pem;
-
-  location / {
-    proxy_set_header Host $host;
-    proxy_pass https://127.0.0.1:9443;
-    proxy_redirect off;
-  }
-}
-
-server {
-  listen 443 ssl;
-  server_name afp.nhcarrigan.com;
-  ssl_certificate /etc/letsencrypt/live/afp.nhcarrigan.com/fullchain.pem;
-  ssl_certificate_key /etc/letsencrypt/live/afp.nhcarrigan.com/privkey.pem;
-
-  location / {
-    proxy_set_header Host $host;
-    proxy_pass https://127.0.0.1:10443;
-    proxy_redirect off;
-  }
-}
-
-server {
-  listen 443 ssl;
-  server_name naomi.lgbt;
-  ssl_certificate /etc/letsencrypt/live/naomi.lgbt/fullchain.pem;
-  ssl_certificate_key /etc/letsencrypt/live/naomi.lgbt/privkey.pem;
-
-  location / {
-    proxy_set_header Host $host;
-    proxy_pass http://127.0.0.1:3000;
-    proxy_redirect off;
-  }
-}
-
-server {
-  listen 443 ssl;
-  server_name www.naomi.lgbt;
-  ssl_certificate /etc/letsencrypt/live/www.naomi.lgbt/fullchain.pem;
-  ssl_certificate_key /etc/letsencrypt/live/www.naomi.lgbt/privkey.pem;
-  
-  location / {
-    proxy_set_header Host $host;
-    proxy_pass http://127.0.0.1:3000;
-    proxy_redirect off;
-  }
-}
-
-server {
-  listen 443 ssl;
-  server_name starfazers.nhcarrigan.com;
-  ssl_certificate /etc/letsencrypt/live/starfazers.nhcarrigan.com/fullchain.pem;
-  ssl_certificate_key /etc/letsencrypt/live/starfazers.nhcarrigan.com/privkey.pem;
-
-  root /home/nhcarrigan/starfazers;
-
-  location / {
-    index index.html;
-  }
-}
-
-server {
-  listen 443 ssl;
-  server_name denna.nhcarrigan.com;
-  ssl_certificate /etc/letsencrypt/live/denna.nhcarrigan.com/fullchain.pem;
-  ssl_certificate_key /etc/letsencrypt/live/denna.nhcarrigan.com/privkey.pem;
-
-  root /home/nhcarrigan/denna/dist/dennagrey;
-
-  location / {
-    index index.html;
-  }
-}
-
-server {
-  listen 443 ssl;
-  server_name nhcarrigan.com;
-  ssl_certificate /etc/letsencrypt/live/nhcarrigan.com/fullchain.pem;
-  ssl_certificate_key /etc/letsencrypt/live/nhcarrigan.com/privkey.pem;
-
-  location / {
-    proxy_set_header Host $host;
-    proxy_pass http://127.0.0.1:3000;
-    proxy_redirect off;
-  }
-}
-
-server {
-  listen 443 ssl;
-  server_name www.nhcarrigan.com;
-  ssl_certificate /etc/letsencrypt/live/www.nhcarrigan.com/fullchain.pem;
-  ssl_certificate_key /etc/letsencrypt/live/www.nhcarrigan.com/privkey.pem;
-
-  location / {
-    proxy_set_header Host $host;
-    proxy_pass http://127.0.0.1:3000;
-    proxy_redirect off;
-  }
-}
-
-server {
-  listen 443 ssl;
-  server_name kaitlyn.nhcarrigan.com;
-  ssl_certificate /etc/letsencrypt/live/kaitlyn.nhcarrigan.com/fullchain.pem;
-  ssl_certificate_key /etc/letsencrypt/live/kaitlyn.nhcarrigan.com/privkey.pem;
-
-  root /home/nhcarrigan/kaitlyn/dist/kaitlyn-nichols;
-
-  location / {
-    index index.html;
-  }
-
-}
-
-server {
-  listen 443 ssl;
-  server_name docs.nhcarrigan.com;
-  ssl_certificate /etc/letsencrypt/live/docs.nhcarrigan.com/fullchain.pem;
-  ssl_certificate_key /etc/letsencrypt/live/docs.nhcarrigan.com/privkey.pem;
-
-  root /home/nhcarrigan/docs/dist;
-
-  location / {
-    index index.html;
-  }
-}
-
-server {
-  listen 443 ssl;
-  server_name notes.nhcarrigan.com;
-  ssl_certificate /etc/letsencrypt/live/notes.nhcarrigan.com/fullchain.pem;
-  ssl_certificate_key /etc/letsencrypt/live/notes.nhcarrigan.com/privkey.pem;
-
-  root /home/nhcarrigan/notes/dist;
-
-  location / {
-    index index.html;
-  }
-}
-
-server {
-  listen 443 ssl;
-  server_name fcc.nhcarrigan.com;
-  ssl_certificate /etc/letsencrypt/live/fcc.nhcarrigan.com/fullchain.pem;
-  ssl_certificate_key /etc/letsencrypt/live/fcc.nhcarrigan.com/privkey.pem;
-
-  root /home/nhcarrigan/status/fcc/dist;
-
-  location / {
-    index index.html;
-  }
-}
-
-server {
-  listen 443 ssl;
-  server_name deepgram.nhcarrigan.com;
-  ssl_certificate /etc/letsencrypt/live/deepgram.nhcarrigan.com/fullchain.pem;
-  ssl_certificate_key /etc/letsencrypt/live/deepgram.nhcarrigan.com/privkey.pem;
-
-  root /home/nhcarrigan/status/deepgram/dist;
-
-  location / {
-    index index.html;
-  }
-}
-
-server {
-  listen 443 ssl;
-  server_name uptime.nhcarrigan.com;
-  ssl_certificate /etc/letsencrypt/live/uptime.nhcarrigan.com/fullchain.pem;
-  ssl_certificate_key /etc/letsencrypt/live/uptime.nhcarrigan.com/privkey.pem;
-
-  location / {
-    proxy_set_header Host $host;
-    proxy_pass http://127.0.0.1:3001;
-  }
-}
-
-server {
-  listen 443 ssl;
-  server_name incidents.nhcarrigan.com;
-  ssl_certificate /etc/letsencrypt/live/incidents.nhcarrigan.com/fullchain.pem;
-  ssl_certificate_key /etc/letsencrypt/live/incidents.nhcarrigan.com/privkey.pem;
-
-  location / {
-    proxy_set_header Host $host;
-    proxy_pass http://127.0.0.1:3001;
-  }
-}
-
 server {
   listen 443 ssl;
   server_name beccalia.nhcarrigan.com;
@@ -384,6 +100,133 @@ server {
   }
 }
 
+server {
+  listen 443 ssl;
+  server_name blog.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/blog.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/blog.nhcarrigan.com/privkey.pem;
+
+  location / {
+    proxy_set_header Host $host;
+    proxy_pass http://127.0.0.1:3003;
+    proxy_redirect off;
+  }
+}
+
+server {
+  listen 443 ssl;
+  server_name chat.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/chat.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/chat.nhcarrigan.com/privkey.pem;
+
+  root /home/nhcarrigan/chat;
+
+  location / {
+    index index.html;
+  }
+}
+
+server {
+  listen 443 ssl;
+  server_name contact.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/contact.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/contact.nhcarrigan.com/privkey.pem;
+
+  return 301 https://docs.nhcarrigan.com/about/contact/;
+}
+
+server {
+  listen 443 ssl;
+  server_name deepgram.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/deepgram.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/deepgram.nhcarrigan.com/privkey.pem;
+
+  root /home/nhcarrigan/status/deepgram/dist;
+
+  location / {
+    index index.html;
+  }
+}
+
+server {
+  listen 443 ssl;
+  server_name docs.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/docs.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/docs.nhcarrigan.com/privkey.pem;
+
+  root /home/nhcarrigan/docs/dist;
+
+  location / {
+    index index.html;
+  }
+}
+
+server {
+  listen 443 ssl;
+  server_name donate.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/donate.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/donate.nhcarrigan.com/privkey.pem;
+
+  return 301 https://docs.nhcarrigan.com/about/donate/;
+}
+
+server {
+  listen 443 ssl;
+  server_name fcc.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/fcc.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/fcc.nhcarrigan.com/privkey.pem;
+
+  root /home/nhcarrigan/status/fcc/dist;
+
+  location / {
+    index index.html;
+  }
+}
+
+server {
+  listen 443 ssl;
+  server_name forms.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/forms.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/forms.nhcarrigan.com/privkey.pem;
+
+  root /home/nhcarrigan/forms/client/dist/client/browser;
+
+  location / {
+    index index.html;
+    try_files $uri $uri/ /index.html;
+  }
+
+  location ~* \.(js|css)$ {
+    try_files $uri $uri/ @rewrite;
+  }
+}
+
+server {
+  listen 443 ssl;
+  server_name forms-api.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/forms-api.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/forms-api.nhcarrigan.com/privkey.pem;
+
+  location / {
+    proxy_set_header Host $host;
+    proxy_pass http://127.0.0.1:1234;
+    proxy_redirect off;
+  }
+}
+
+server {
+  listen 443 ssl;
+  server_name games.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/games.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/games.nhcarrigan.com/privkey.pem;
+
+  root /home/nhcarrigan/games;
+
+  location / {
+    index index.html;
+  }
+}
+
 server {
   listen 443 ssl;
   server_name goblin.nhcarrigan.com;
@@ -397,6 +240,57 @@ server {
   }
 }
 
+server {
+  listen 443 ssl;
+  server_name gwen.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/gwen.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/gwen.nhcarrigan.com/privkey.pem;
+
+  location / {
+    proxy_set_header Host $host;
+    proxy_pass http://127.0.0.1:5012;
+    proxy_redirect off;
+  }
+}
+
+server {
+  listen 443 ssl;
+  server_name hooks.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/hooks.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/hooks.nhcarrigan.com/privkey.pem;
+
+  location / {
+    proxy_set_header Host $host;
+    proxy_pass https://127.0.0.1:9443;
+    proxy_redirect off;
+  }
+}
+
+server {
+  listen 443 ssl;
+  server_name incidents.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/incidents.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/incidents.nhcarrigan.com/privkey.pem;
+
+  location / {
+    proxy_set_header Host $host;
+    proxy_pass http://127.0.0.1:3001;
+  }
+}
+
+server {
+  listen 443 ssl;
+  server_name irc-private.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/irc-private.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/irc-private.nhcarrigan.com/privkey.pem;
+
+  location / {
+    proxy_set_header Host $host;
+    proxy_pass http://127.0.0.1:9000;
+    proxy_redirect off;
+  }
+}
+
 server {
   listen 443 ssl;
   server_name loan.nhcarrigan.com;
@@ -412,13 +306,136 @@ server {
 
 server {
   listen 443 ssl;
-  server_name linkdetector.nhcarrigan.com;
-  ssl_certificate /etc/letsencrypt/live/linkdetector.nhcarrigan.com/fullchain.pem;
-  ssl_certificate_key /etc/letsencrypt/live/linkdetector.nhcarrigan.com/privkey.pem;
+  server_name manual.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/manual.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/manual.nhcarrigan.com/privkey.pem;
+
+  root /home/nhcarrigan/manual;
+
+  location / {
+    index index.html;
+  }
+}
+
+server {
+  listen 443 ssl;
+  server_name maylin.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/maylin.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/maylin.nhcarrigan.com/privkey.pem;
 
   location / {
     proxy_set_header Host $host;
-    proxy_pass http://127.0.0.1:2443;
+    proxy_pass http://127.0.0.1:5011;
+    proxy_redirect off;
+  }
+}
+
+server {
+  listen 443 ssl;
+  server_name moderation.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/moderation.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/moderation.nhcarrigan.com/privkey.pem;
+
+  location / {
+    proxy_set_header Host $host;
+    proxy_pass http://127.0.0.1:12443;
+    proxy_redirect off;
+  }
+}
+
+server {
+  listen 443 ssl;
+  server_name nails.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/nails.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/nails.nhcarrigan.com/privkey.pem;
+
+  root /home/nhcarrigan/nails/client/dist/client/browser;
+
+  location / {
+    index index.html;
+    try_files $uri $uri/ /index.html;
+  }
+
+  location ~* \.(js|css)$ {
+    try_files $uri $uri/ @rewrite;
+  }
+}
+
+server {
+  listen 443 ssl;
+  server_name nails-api.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/nails-api.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/nails-api.nhcarrigan.com/privkey.pem;
+
+  location / {
+    proxy_set_header Host $host;
+    proxy_pass http://127.0.0.1:1235;
+    proxy_redirect off;
+  }
+}
+
+server {
+  listen 443 ssl;
+  server_name naomi.lgbt;
+  ssl_certificate /etc/letsencrypt/live/naomi.lgbt/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/naomi.lgbt/privkey.pem;
+
+  location / {
+    proxy_set_header Host $host;
+    proxy_pass http://127.0.0.1:3000;
+    proxy_redirect off;
+  }
+}
+
+server {
+  listen 443 ssl;
+  server_name naomi.party;
+  ssl_certificate /etc/letsencrypt/live/naomi.party/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/naomi.party/privkey.pem;
+
+  root /home/nhcarrigan/bsky;
+
+  location / {
+    index index.html;
+  }
+}
+
+server {
+  listen 443 ssl;
+  server_name nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/nhcarrigan.com/privkey.pem;
+
+  location / {
+    proxy_set_header Host $host;
+    proxy_pass http://127.0.0.1:3000;
+    proxy_redirect off;
+  }
+}
+
+server {
+  listen 443 ssl;
+  server_name nhcarrigan.link;
+  ssl_certificate /etc/letsencrypt/live/nhcarrigan.link/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/nhcarrigan.link/privkey.pem;
+
+  root /home/nhcarrigan/link-redirector;
+
+  location / {
+    index index.html;
+  }
+}
+
+server {
+  listen 443 ssl;
+  server_name notes.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/notes.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/notes.nhcarrigan.com/privkey.pem;
+
+  root /home/nhcarrigan/notes/dist;
+
+  location / {
+    index index.html;
   }
 }
 
@@ -434,6 +451,34 @@ server {
   }
 }
 
+server {
+  listen 443 ssl;
+  server_name quality.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/quality.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/quality.nhcarrigan.com/privkey.pem;
+
+  client_max_body_size 1g;
+
+  location / {
+    proxy_set_header Host $host;
+    proxy_pass http://127.0.0.1:9500;
+    proxy_redirect off;
+  }
+}
+
+server {
+  listen 443 ssl;
+  server_name resume.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/resume.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/resume.nhcarrigan.com/privkey.pem;
+
+  root /home/nhcarrigan/resume;
+
+  location / {
+    index index.html;
+  }
+}
+
 server {
   listen 443 ssl;
   server_name ruubot.nhcarrigan.com;
@@ -446,6 +491,32 @@ server {
   }
 }
 
+server {
+  listen 443 ssl;
+  server_name security.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/security.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/security.nhcarrigan.com/privkey.pem;
+
+  root /home/nhcarrigan/security;
+
+  location / {
+    index index.html;
+  }
+}
+
+server {
+  listen 443 ssl;
+  server_name sitemap.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/sitemap.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/sitemap.nhcarrigan.com/privkey.pem;
+
+  root /home/nhcarrigan/sitemap;
+
+  location / {
+    index index.html;
+  }
+}
+
 server {
   listen 443 ssl;
   server_name tasks.nhcarrigan.com;
@@ -458,6 +529,32 @@ server {
   }
 }
 
+server {
+  listen 443 ssl;
+  server_name testimonials.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/testimonials.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/testimonials.nhcarrigan.com/privkey.pem;
+
+  root /home/nhcarrigan/testimonials;
+
+  location / {
+    index index.html;
+  }
+}
+
+server {
+  listen 443 ssl;
+  server_name tickets.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/tickets.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/tickets.nhcarrigan.com/privkey.pem;
+
+  location / {
+    proxy_set_header Host $host;
+    proxy_pass http://127.0.0.1:14443;
+  }
+}
+
+
 server {
   listen 443 ssl;
   server_name trans.nhcarrigan.com;
@@ -484,129 +581,38 @@ server {
 
 server {
   listen 443 ssl;
-  server_name trans-slack.nhcarrigan.com;
-  ssl_certificate /etc/letsencrypt/live/trans-slack.nhcarrigan.com/fullchain.pem;
-  ssl_certificate_key /etc/letsencrypt/live/trans-slack.nhcarrigan.com/privkey.pem;
+  server_name uptime.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/uptime.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/uptime.nhcarrigan.com/privkey.pem;
 
   location / {
     proxy_set_header Host $host;
-    proxy_pass http://127.0.0.1:5002;
+    proxy_pass http://127.0.0.1:3001;
   }
 }
 
 server {
   listen 443 ssl;
-  server_name naomiai.nhcarrigan.com;
-  ssl_certificate /etc/letsencrypt/live/naomiai.nhcarrigan.com/fullchain.pem;
-  ssl_certificate_key /etc/letsencrypt/live/naomiai.nhcarrigan.com/privkey.pem;
+  server_name www.naomi.lgbt;
+  ssl_certificate /etc/letsencrypt/live/www.naomi.lgbt/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/www.naomi.lgbt/privkey.pem;
 
   location / {
     proxy_set_header Host $host;
-    proxy_pass http://127.0.0.1:6443;
+    proxy_pass http://127.0.0.1:3000;
+    proxy_redirect off;
   }
 }
 
 server {
   listen 443 ssl;
-  server_name analytics.nhcarrigan.com;
-  ssl_certificate /etc/letsencrypt/live/analytics.nhcarrigan.com/fullchain.pem;
-  ssl_certificate_key /etc/letsencrypt/live/analytics.nhcarrigan.com/privkey.pem;
+  server_name www.nhcarrigan.com;
+  ssl_certificate /etc/letsencrypt/live/www.nhcarrigan.com/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/live/www.nhcarrigan.com/privkey.pem;
 
   location / {
     proxy_set_header Host $host;
-    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-    proxy_pass http://127.0.0.1:11080;
-  }
-
-  location = /live/websocket {
-    proxy_pass http://127.0.0.1:11080;
-    proxy_http_version 1.1;
-    proxy_set_header Upgrade $http_upgrade;
-    proxy_set_header Connection "Upgrade";
-  }
-}
-
-server {
-  listen 443 ssl;
-  server_name bridge.nhcarrigan.com;
-  ssl_certificate /etc/letsencrypt/live/bridge.nhcarrigan.com/fullchain.pem;
-  ssl_certificate_key /etc/letsencrypt/live/bridge.nhcarrigan.com/privkey.pem;
-
-  location / {
-    proxy_set_header Host $host;
-    proxy_pass http://127.0.0.1:7443;
-  }
-}
-
-server {
-  listen 443 ssl;
-  server_name alt.nhcarrigan.com;
-  ssl_certificate /etc/letsencrypt/live/alt.nhcarrigan.com/fullchain.pem;
-  ssl_certificate_key /etc/letsencrypt/live/alt.nhcarrigan.com/privkey.pem;
-
-  location / {
-    proxy_set_header Host $host;
-    proxy_pass http://127.0.0.1:8443;
-  }
-}
-
-server {
-  listen 443 ssl;
-  server_name anon.nhcarrigan.com;
-  ssl_certificate /etc/letsencrypt/live/anon.nhcarrigan.com/fullchain.pem;
-  ssl_certificate_key /etc/letsencrypt/live/anon.nhcarrigan.com/privkey.pem;
-
-  location / {
-    proxy_set_header Host $host;
-    proxy_pass http://127.0.0.1:11443;
-  }
-}
-
-server {
-  listen 443 ssl;
-  server_name eval.nhcarrigan.com;
-  ssl_certificate /etc/letsencrypt/live/eval.nhcarrigan.com/fullchain.pem;
-  ssl_certificate_key /etc/letsencrypt/live/eval.nhcarrigan.com/privkey.pem;
-
-  location / {
-    proxy_set_header Host $host;
-    proxy_pass http://127.0.0.1:12443;
-  }
-}
-
-server {
-  listen 443 ssl;
-  server_name lib.nhcarrigan.com;
-  ssl_certificate /etc/letsencrypt/live/lib.nhcarrigan.com/fullchain.pem;
-  ssl_certificate_key /etc/letsencrypt/live/lib.nhcarrigan.com/privkey.pem;
-
-  location / {
-    proxy_set_header Host $host;
-    proxy_pass http://127.0.0.1:13443;
-  }
-}
-
-server {
-  listen 443 ssl;
-  server_name tickets.nhcarrigan.com;
-  ssl_certificate /etc/letsencrypt/live/tickets.nhcarrigan.com/fullchain.pem;
-  ssl_certificate_key /etc/letsencrypt/live/tickets.nhcarrigan.com/privkey.pem;
-
-  location / {
-    proxy_set_header Host $host;
-    proxy_pass http://127.0.0.1:14443;
-  }
-}
-
-server {
-  listen 443 ssl;
-  server_name merlin.nhcarrigan.com;
-  ssl_certificate /etc/letsencrypt/live/merlin.nhcarrigan.com/fullchain.pem;
-  ssl_certificate_key /etc/letsencrypt/live/merlin.nhcarrigan.com/privkey.pem;
-
-  root /home/nhcarrigan/merlin;
-
-  location / {
-    index index.html;
+    proxy_pass http://127.0.0.1:3000;
+    proxy_redirect off;
   }
 }