Symptom
Ghost is reachable locally on port 2368, but HTTPS does not work or Certbot fails to install the certificate.
Cause
Nginx is missing a proper server_name block matching the domain, preventing Certbot from attaching the certificate.
Solution
1. Point the domain A record to the server IP.
2.