---
---

ssl on;
ssl_certificate {{ site.cert-path }}/subdomain-preloaded-expect-ct.pem;
ssl_certificate_key /etc/keys/leaf-main.key;

add_header Expect-CT preload;