server {
	listen			202.61.255.100:443 ssl http2;
	listen			[2a03:4000:55:d1d::]:443 ssl http2;
	listen			192.168.0.120:443 ssl http2;

	server_name		party.lysergic.dev;

	ssl_certificate		/etc/ssl/lysergic/fullchain.pem;
	ssl_certificate_key	/etc/ssl/lysergic/private/privkey.pem;

	ssl_session_timeout		1d;
	ssl_session_cache		shared:MozSSL:10m;  # about 40000 sessions
	ssl_session_tickets		off;
	ssl_protocols			TLSv1.2 TLSv1.3;
	ssl_prefer_server_ciphers	off;
	add_header			Strict-Transport-Security "max-age=63072000" always;
	ssl_stapling			on;
	ssl_stapling_verify		on;
	ssl_trusted_certificate		/etc/ssl/ca-bundle.pem;
	resolver			127.0.0.4;


	location		/ {
				proxy_pass	http://127.0.0.1:8250;
				proxy_set_header X-Forwarded-Host $host:$server_port;
	}

	location		/jsxc {
				root	/srv/www/jsxc.party;
	}
}