change gitignore and system components

.gitignore

@@ -7,3 +7,6 @@ storage/trash/routes/*
 !storage/trash/routes/.gitkeep
 .env
 npm-debug.log*
+
+nginx/
+systemd/

nginx/siteconfig

@@ -1,24 +1,19 @@
-server {
-    listen 80;
-    listen [::]:80;
-
-    server_name atlas.example.de;
-
-    return 301 https://$host$request_uri;
-}
-
 server {
     listen 443 ssl;
     listen [::]:443 ssl;
 
-    server_name atlas.example.de;
+    server_name wegwichtel.de;
 
-    ssl_certificate     /etc/letsencrypt/live/atlas.example.de/fullchain.pem;
-    ssl_certificate_key /etc/letsencrypt/live/atlas.example.de/privkey.pem;
+    ssl_certificate     /etc/letsencrypt/live/wegwichtel.de/fullchain.pem; # managed by Certbot
+    ssl_certificate_key /etc/letsencrypt/live/wegwichtel.de/privkey.pem; # managed by Certbot
+    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
 
-    root /srv/www/wegwichtel/public;
+    root /srv/wegwichtel/Wegwichtel/public;
     index index.html;
 
+    error_log /srv/wegwichtel/logs/error.log warn;
+
     # Begrenzung des gesamten HTTP-Requests.
     # Wegen GPX-, Bild- und Audio-Uploads größer als das Node-Einzellimit.
     client_max_body_size 256m;
@@ -70,3 +65,18 @@ server {
         add_header X-Content-Type-Options "nosniff" always;
     }
 }
+
+server {
+    if ($host = wegwichtel.de) {
+        return 301 https://$host$request_uri;
+    } # managed by Certbot
+
+
+    listen 80;
+    listen [::]:80;
+
+    server_name wegwichtel.de;
+    return 404; # managed by Certbot
+
+
+}

systemd/wegwichtel.service

@@ -8,10 +8,10 @@ Type=simple
 User=wegwichtel
 Group=wegwichtel
 
-WorkingDirectory=/srv/www/wegwichtel
-EnvironmentFile=/srv/www/wegwichtel/.env
+WorkingDirectory=/srv/wegwichtel/Wegwichtel
+EnvironmentFile=/srv/wegwichtel/Wegwichtel/.env
 
-ExecStart=/usr/bin/node /srv/www/wegwichtel/server.js
+ExecStart=/usr/bin/node /srv/wegwichtel/Wegwichtel/server.js
 
 Restart=on-failure
 RestartSec=5
@@ -21,8 +21,8 @@ PrivateTmp=true
 ProtectSystem=full
 ProtectHome=true
 
-ReadWritePaths=/srv/www/wegwichtel/data
-ReadWritePaths=/srv/www/wegwichtel/storage
+ReadWritePaths=/srv/wegwichtel/Wegwichtel/data
+ReadWritePaths=/srv/wegwichtel/Wegwichtel/storage
 
 [Install]
 WantedBy=multi-user.target