server { listen 192.168.0.115:8087 ssl; server_name graylog-local.two.secure.squirrelcube.xyz; ssl_certificate /etc/ssl/tp/fullchain.pem; ssl_certificate_key /etc/ssl/tp/private/privkey.pem; location / { proxy_pass http://127.0.0.1:9000; proxy_set_header X-Forwarded-Host $host; proxy_set_header X-Forwarded-Server $host; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_http_version 1.1; } } #server { # listen 202.61.255.116:443 ssl http2; # listen [2a03:4000:55:d20::]:443 ssl http2; # server_name glpub.two.secure.squirrelcube.xyz; # # ssl_certificate /etc/ssl/tp/fullchain.pem; # ssl_certificate_key /etc/ssl/tp/private/privkey.pem; # ssl_session_timeout 1d; # ssl_session_cache shared:MozSSLS:10m; # ssl_session_tickets off; # ssl_protocols TLSv1.3; # ssl_prefer_server_ciphers off; # add_header Strict-Transport-Security "max-age=63072000" always; # ssl_stapling on; # ssl_stapling_verify on; # ssl_trusted_certificate /etc/ssl/ca-bundle.pem; # resolver 127.0.0.4; # # location /streams { # proxy_pass http://127.0.0.1:9000/; # proxy_set_header X-Forwarded-Host $host; # proxy_set_header X-Forwarded-Server $host; # proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; # proxy_http_version 1.1; # } #}