anchor.diff:  
   server {
   <% if fetch(:nginx_use_ssl) -%>
  -  listen 443;
  +  listen 443 default_server;
     ssl on;
   <% if fetch(:nginx_ssl_certificate) -%>
     ssl_certificate <%= fetch(:nginx_ssl_certificate) %>;
  
positive.code: <% end -%>
  
  server {
      listen [::]:80;
      listen 80;
      server_name www.thing.pennsicuniversity.org;
      return 301 $scheme://thing.pennsicuniversity.org$request_uri;
  }
  
  server {
      listen [::]:80;
      listen 80;
      server_name www.pennsicuniversity.org;
      return 301 $scheme://thing.pennsicuniversity.org$request_uri;
  }
  
  server {
      listen [::]:80;
      listen 80;
      server_name pennsicuniversity.org;
      return 301 $scheme://thing.pennsicuniversity.org$request_uri;
  }
  
  server {
      listen [::]:80;
      listen 80;
      server_name *.thing.xcdn.org;
  
  
negative.code:   ssl_certificate_key /etc/ssl/private/<%= fetch(:nginx_config_name) %>.key;
  <% end -%>
  <% else -%>
    listen 80 default_server;
  <% end -%>
    server_name <%= fetch(:nginx_server_name) %>;
    root <%= current_path %>/public;
  