# Listen on port 80
server {
  listen 80;
  # Set your domain name
  server_name u1.metaebene.dev;
  # Redirect all requests to HTTPS
  return 301 https://$host$request_uri;
}

# Listen on port 443 with SSL
server {
  listen 443 ssl;
  # Set your domain name
  server_name u1.metaebene.dev;

  # Include SSL certificate managed by Certbot
  ssl_certificate /etc/letsencrypt/live/u1.metaebene.dev/fullchain.pem;
  # Include SSL certificate key managed by Certbot
  ssl_certificate_key /etc/letsencrypt/live/u1.metaebene.dev/privkey.pem;
  # Include SSL options provided by Certbot
  include /etc/letsencrypt/options-ssl-nginx.conf;
  # Include DH parameters provided by Certbot
  ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;

  # Proxy settings for the location
  location / {
    # Set backend server address and port
    proxy_pass http://localhost:8080;
    # Set Host header
    proxy_set_header Host $host;
    # Set X-Real-IP header
    proxy_set_header X-Real-IP $remote_addr;
    # Set X-Forwarded-For header
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    # Set X-Forwarded-Proto header
    proxy_set_header X-Forwarded-Proto $scheme;
  }
}