diff --git a/misc/nginx-base.conf b/misc/nginx-base.conf
new file mode 100644
index 0000000..50ac3b4
--- /dev/null
+++ b/misc/nginx-base.conf
@@ -0,0 +1,8 @@
+server_name media.metanohi.name www.media.metanohi.name;
+
+root /var/www/media.metanohi.name/site;
+index index.html;
+
+location / {
+    try_files $uri $uri/ =404;
+}
diff --git a/misc/nginx.conf b/misc/nginx.conf
index 3957c12..d294564 100644
--- a/misc/nginx.conf
+++ b/misc/nginx.conf
@@ -1,16 +1,19 @@
 server {
-	listen 80;
-	listen [::]:80;
+    listen 80;
+    listen [::]:80;
 
-	root /var/www/media.metanohi.name/site;
-
-	index index.html;
-
-	server_name media.metanohi.name;
-
-	location / {
-		# First attempt to serve request as file, then
-		# as directory, then fall back to displaying a 404.
-		try_files $uri $uri/ =404;
-	}
+    include /etc/nginx/snippets/letsencrypt.conf;	
+    include /etc/nginx/basics/media.metanohi.name.conf;
+}
+
+server {
+    listen 443 ssl http2;
+    listen [::]:443 ssl http2;
+
+    ssl_certificate /etc/letsencrypt/live/media.metanohi.name/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/media.metanohi.name/privkey.pem;
+    ssl_trusted_certificate /etc/letsencrypt/live/media.metanohi.name/fullchain.pem;
+
+    include /etc/nginx/snippets/ssl.conf;
+    include /etc/nginx/basics/media.metanohi.name.conf;
 }