Builds a complete server block for a static site, single-page app, reverse proxy, load balancer (least_conn upstream with failover) or PHP-FPM site: HTTP → HTTPS redirect with the ACME challenge location, Let's Encrypt or custom certificate paths with Mozilla-intermediate TLS settings and OCSP stapling, HSTS and security headers, gzip, long-lived caching for static assets, proxy headers with optional WebSocket upgrade, optional per-IP rate limiting, body-size limit, and your own directives. The second panel lists the commands to install, obtain the certificate, test and reload. Text only — nothing is deployed.