limit_req_zone $binary_remote_addr zone=mylimit:10m rate=10r/s;

server {
  listen          80 default_server;
  server_name     secretbee.buzz;
  limit_req zone=mylimit burst=20;

  location / {
    return 301 https://$host$request_uri;
  }
}

server {
  listen         443 ssl;
  server_name    secretbee.buzz;

  limit_req zone=mylimit burst=20;

  root /var/www;

  add_header Strict-Transport-Security "max-age=31536000" always; 

  ssl_certificate     /etc/letsencrypt/live/secretbee.buzz/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/secretbee.buzz/privkey.pem;
  ssl_protocols       TLSv1.2 TLSv1.3;
  ssl_ciphers         HIGH:!aNULL:!MD5;

  location / {
    default_type "text/html";
    try_files  $uri $uri.html $uri/index.html index.html;
  }
}