server { listen 80; server_name archive.music.wojciechkozlowski.eu; location ^~ /.well-known { allow all; root /var/www/html; } location / { return 301 https://$server_name$request_uri; } } server { listen 127.0.0.1:443 ssl; server_name archive.music.wojciechkozlowski.eu; ssl_certificate /etc/letsencrypt/live/archive.music.wojciechkozlowski.eu/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/archive.music.wojciechkozlowski.eu/privkey.pem; ssl_trusted_certificate /etc/letsencrypt/live/archive.music.wojciechkozlowski.eu/chain.pem; location / { proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header Host $host; proxy_pass http://pod-music:8080; } error_page 500 502 503 504 /50x.html; location = /50x.html { root /usr/share/nginx/html; } }