{ default_sni web } localhost { tls /tls/tls.crt /tls/tls.key root * /srv file_server }