server { listen 80; listen [::]:80; server_name webmin.ascoetpi.ovh; return 404; } server { listen 443 ssl; listen [::]:443 ssl; server_name webmin.ascoetpi.ovh; ssl_certificate /etc/nginx/ssl/webmin.ascoetpi.ovh_P256/fullchain.cer; ssl_certificate_key /etc/nginx/ssl/webmin.ascoetpi.ovh_P256/private.key; location / { proxy_pass https://127.0.0.1:10000; proxy_redirect off; #Proxy Settings proxy_set_header Host $host:$server_port; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_max_temp_file_size 0; proxy_connect_timeout 90; proxy_send_timeout 90; proxy_read_timeout 90; proxy_buffer_size 128k; proxy_buffers 32 32k; proxy_busy_buffers_size 256k; proxy_temp_file_write_size 256k; } location ~ /.well-known/acme-challenge { proxy_set_header Host $host; proxy_set_header X-Real_IP $remote_addr; proxy_set_header X-Forwarded-For $remote_addr:$remote_port; proxy_pass http://127.0.0.1:9180; } }