I automated this and other standard nginx configurations with ansible for ubuntu 16.04. Here's the role: https://github.com/naggie/nginx-https-base https://gith

I automated this and other standard nginx configurations with ansible for ubuntu 16.04. Here's the role: https://github.com/naggie/nginx-https-base https://github.com/naggie/nginx-https-base It uses webroot + certbot for zero downtime deployment, and provides neater error pages. Also gets an A+ on https://www.ssllabs.com/ssltest/ https://www.ssllabs.com/ssltest/ . Hopefully it's useful to someone.