server {
        listen                  202.61.255.100:443 ssl http2;
        listen                  [2a03:4000:55:d1d::]:443 ssl http2;

	server_name		vdi.three.secure.squirrelcube.xyz;

	ssl_certificate		/etc/ssl/tp/fullchain.pem;
	ssl_certificate_key	/etc/ssl/tp/private/privkey.pem;

	ssl_session_timeout	1d;
	ssl_session_cache	shared:MozSSL:10m;  # about 40000 sessions
	ssl_session_tickets	off;

	ssl_protocols			TLSv1.3;
	ssl_prefer_server_ciphers	off;

	add_header		Strict-Transport-Security "max-age=63072000" always;

	ssl_stapling		on;
	ssl_stapling_verify	on;

	ssl_trusted_certificate /etc/ssl/ca-bundle.pem;

	resolver		172.168.100.2;

	location		/ {
			proxy_pass	https://127.0.0.1:4435;
			proxy_ssl_verify off;

    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header Host $http_host;
    proxy_set_header x-webobjects-server-protocol HTTP/1.0;
    proxy_set_header x-webobjects-remote-host $remote_addr;
    proxy_set_header x-webobjects-server-name $server_name;
    proxy_set_header x-webobjects-server-url https://$http_host;
    proxy_set_header x-webobjects-server-port $server_port;
    proxy_send_timeout 3600;
    proxy_read_timeout 3600;
    client_body_buffer_size 128k;
    client_max_body_size 0;
	}
}