modified: .gitignore

new file:   Dockerfile.certbot
	new file:   Dockerfile.nginx
	new file:   Makefile
	new file:   compose.certbot.yml
	new file:   docker-compose.yml
	new file:   entrypoint-certbot.sh
	new file:   entrypoint-nginx.sh
	new file:   nginx-gitea.conf.template
	new file:   nginx.conf.template

nginx.conf.template

@@ -0,0 +1,40 @@
+worker_processes auto;
+error_log /var/log/nginx/error.log warn;
+pid /var/run/nginx.pid;
+
+events {
+    worker_connections 1024;
+}
+
+http {
+    include /etc/nginx/mime.types;
+    default_type application/octet-stream;
+    sendfile on;
+    keepalive_timeout 65;
+
+    log_format visitor_ip '$remote_addr - $time_iso8601';
+    access_log /var/log/nginx/visitors/visitors.log visitor_ip;
+
+    server {
+        listen 80;
+        server_name ${DOMAIN};
+        return 301 https://$host$request_uri;
+    }
+
+    server {
+        listen 443 ssl;
+        server_name ${DOMAIN};
+        root /usr/share/nginx/html;
+        index index.html;
+
+        ssl_certificate ${SSL_CERTIFICATE};
+        ssl_certificate_key ${SSL_CERTIFICATE_KEY};
+        ssl_protocols TLSv1.2 TLSv1.3;
+
+        location / {
+            try_files $uri $uri/ /index.html;
+        }
+    }
+
+    include /etc/nginx/conf.d/gitea.conf;
+}