server {
	server_name tp.3gy.de three.tp.3gy.de *.three.secure.squirrelcube.xyz;
	listen	202.61.255.100:443 ssl;
	listen	[2a03:4000:55:d1d::]:443 ssl;

	ssl_certificate  /etc/ssl/tp/fullchain.pem;
	ssl_certificate_key  /etc/ssl/tp/private/privkey.pem;

	ssl_session_timeout 1d;
	ssl_session_cache shared:MozSSL:10m;
	ssl_session_tickets off;
	ssl_protocols TLSv1.3;
	#ssl_ciphers
	#ssl_prefer_server_ciphers
	add_header Strict-Transport-Security "max-age=63072000" always;
	ssl_stapling on;
	ssl_stapling_verify on;

	location / {
		proxy_pass https://[::1]:3080/;
		proxy_ssl_verify off;
		proxy_set_header Upgrade $http_upgrade;
		proxy_set_header Connection "Upgrade";
		proxy_set_header Host $host;
		proxy_read_timeout 3600;
	}
}