# SSL Certificate Setup
#
# Place your SSL certificates in this directory:
#   ssl/cert.pem   — your certificate (or fullchain)
#   ssl/key.pem    — your private key
#
# To generate self-signed certs for local testing:
#   openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
#     -keyout ssl/key.pem -out ssl/cert.pem \
#     -subj "/CN=localhost"
#
# For production, use Let's Encrypt:
#   certbot certonly --standalone -d your-domain.com
#   cp /etc/letsencrypt/live/your-domain.com/fullchain.pem ssl/cert.pem
#   cp /etc/letsencrypt/live/your-domain.com/privkey.pem ssl/key.pem
#
# Then uncomment the HTTPS server block in nginx.conf.