system/nginx/03/mail.conf

server {
	listen			192.168.0.120:443 ssl http2;

	server_name		zz0.email;

	ssl_certificate		/etc/ssl/mail/fullchain.pem;
	ssl_certificate_key	/etc/ssl/mail/private/privkey.pem;

	ssl_session_timeout	1d;
	ssl_session_cache	shared:MozSSL:10m;  # about 40000 sessions
	ssl_session_tickets	off;

	ssl_protocols			TLSv1.3;
	ssl_prefer_server_ciphers	off;

	add_header		Strict-Transport-Security "max-age=63072000" always;

	ssl_stapling		on;
	ssl_stapling_verify	on;

	ssl_trusted_certificate /etc/ssl/ca-bundle.pem;

	resolver		172.168.100.2;

	location		/Microsoft-Server-ActiveSync {
				proxy_pass http://127.0.0.2:8080/Microsoft-Server-ActiveSync;
				proxy_set_header Host $http_host;
				proxy_set_header X-Real-IP $remote_addr;
				proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
				proxy_set_header X-Forwarded-Proto $scheme;
				proxy_connect_timeout 75;
				proxy_send_timeout 3650;
				proxy_read_timeout 3650;
				proxy_buffers 64 256k;
				client_body_buffer_size 512k;
				client_max_body_size 0;
	}

	location		/ {
				proxy_pass		http://127.0.0.2:8080/;
				proxy_set_header 	Host $http_host;
				proxy_set_header	X-Real-IP $remote_addr;
				proxy_set_header	X-Forwarded-For $proxy_add_x_forwarded_for;
				proxy_set_header	X-Forwarded-Proto $scheme;
				client_max_body_size	0;
	}
}
server {
        listen                  202.61.255.100:443 ssl http2;
        listen                  [2a03:4000:55:d1d::]:443 ssl http2;

	server_name		sogo.zz0.email zz0.email;

	ssl_certificate		/etc/ssl/mail/fullchain.pem;
	ssl_certificate_key	/etc/ssl/mail/private/privkey.pem;

	ssl_session_timeout	1d;
	ssl_session_cache	shared:MozSSL:10m;  # about 40000 sessions
	ssl_session_tickets	off;

	ssl_protocols			TLSv1.3;
	ssl_prefer_server_ciphers	off;

	add_header		Strict-Transport-Security "max-age=63072000" always;

	ssl_stapling		on;
	ssl_stapling_verify	on;

	ssl_trusted_certificate /etc/ssl/ca-bundle.pem;

	resolver		172.168.100.2;

	location		/ {
		return		302 /SOGo;
	}

	location		/SOGo {
			proxy_pass	http://127.0.0.2:20000;

    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header Host $http_host;
    proxy_set_header x-webobjects-server-protocol HTTP/1.0;
    proxy_set_header x-webobjects-remote-host $remote_addr;
    proxy_set_header x-webobjects-server-name $server_name;
    proxy_set_header x-webobjects-server-url https://$http_host;
    proxy_set_header x-webobjects-server-port $server_port;
    proxy_send_timeout 3600;
    proxy_read_timeout 3600;
    client_body_buffer_size 128k;
    client_max_body_size 0;
    break;

	}


  location /SOGo.woa/WebServerResources/ {
	alias /opt/GNUstep/SOGo/WebServerResources/;
  }

  location /.woa/WebServerResources/ {
	alias /opt/GNUstep/SOGo/WebServerResources/;
  }

  location /SOGo/WebServerResources/ {
	alias /opt/GNUstep/SOGo/WebServerResources/;
  }

  location (^/SOGo/so/ControlPanel/Products/[^/]*UI/Resources/.*\.(jpg|png|gif|css|js)$) {
	alias /opt/GNUstep/SOGo/$1.SOGo/Resources/$2;
  }

  #trying to make / serve SOGo with no fuzz....
#  location /WebServerResources/ {
#	alias /opt/GNUstep/SOGo/WebServerResources/;
#  }

#  location (^/so/ControlPanel/Products/[^/]*UI/Resources/.*\.(jpg|png|gif|css|js)$) {
#	alias /opt/GNUstep/SOGo/$1.SOGo/Resources/$2;
#  }


}