chore: finalize nginx with ssl and correct paths

nginx.conf

@@ -1,8 +1,7 @@
 server {
-    listen 80;
-    server_name radionica3d.me www.radionica3d.me 148.230.71.134;
+    server_name radionica3d.me www.radionica3d.me;
 
-    root /usr/share/nginx/html;
+    root /var/www/radionica3d/html;
     index index.html;
 
     # Gzip Compression
@@ -35,10 +34,26 @@ server {
         proxy_set_header Host $host;
     }
 
-    # Static uploads (if served via Nginx instead of FastAPI)
+    # Static uploads
     location /uploads/ {
-        alias /app/uploads/;
+        alias /var/www/radionica3d/backend/uploads/;
         expires 7d;
         add_header Cache-Control "public";
     }
+
+    listen 443 ssl; # managed by Certbot
+    ssl_certificate /etc/letsencrypt/live/radionica3d.me/fullchain.pem; # managed by Certbot
+    ssl_certificate_key /etc/letsencrypt/live/radionica3d.me/privkey.pem; # managed by Certbot
+    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
+    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
+}
+
+server {
+    if ($host = radionica3d.me) {
+        return 301 https://$host$request_uri;
+    } # managed by Certbot
+
+    listen 80;
+    server_name radionica3d.me www.radionica3d.me;
+    return 301 https://radionica3d.me$request_uri;
 }