server { listen 80; listen [::]:80; server_name pad.chalec.org; root /var/www/html; # rewrite ^/(.*)$ https://pad.chalec.org/$1 permanent; } server { set_real_ip_from 192.168.1.1; real_ip_header proxy_protocol; add_header Strict-Transport-Security "max-age=31536000" always; listen [::]:443 ssl default_server; listen 443 proxy_protocol ssl default_server; server_name pad.chalec.org; access_log /var/log/nginx/pad.chalec.org/access.log; error_log /var/log/nginx/pad.chalec.org/error.log warn; include snippets/letsencrypt.conf; root /var/www/html; location /.well-known/statoolinfos { alias /var/www/html/.well-known/statoolinfos/; autoindex on; } location / { #proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_pass http://127.0.0.1:9001; proxy_buffering off; # WebSocket proxying - from https://nginx.org/en/docs/http/websocket.html proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection $connection_upgrade; } ssi on; ssi_last_modified on; }