# Library service proxy. server { listen 443 ssl; server_name library.nhcarrigan.com; ssl_certificate /etc/letsencrypt/live/library.nhcarrigan.com/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/library.nhcarrigan.com/privkey.pem; location / { proxy_set_header Host $host; proxy_pass http://127.0.0.1:12321; proxy_redirect off; } include /etc/nginx/snippets/deny-dotfiles.conf; }