http://<< web_fqdn >> {
  handle /.well-known/acme-challenge/* {
    reverse_proxy localhost:80
  }
  handle {
    redir https://{host}{uri} 308
  }
}
:80 {
  root /srv/certbot.<< web_fqdn >>
  browse
}
<< web_fqdn >> {
  respond 503
  # root /srv/<< web_fqdn >>
  file_server
  
  header /.well-known/openpgpkey/* {
    Content-Type application/octet-stream
    Access-Control-Allow-Origin *
  }
  
  handle_errors {
    rewrite /error/{err.status_code}.html
    templates
  }
}