Updates

templates/nginx-site.conf.j2

@@ -0,0 +1,27 @@
+server {
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    server_name {{ external_host }};
+
+    ssl_certificate         /etc/letsencrypt/live/{{ external_host }}/fullchain.pem;
+    ssl_certificate_key     /etc/letsencrypt/live/{{ external_host }}/privkey.pem;
+    ssl_trusted_certificate /etc/letsencrypt/live/{{ external_host }}/fullchain.pem;
+
+    include /etc/nginx/config/tls.conf;
+    include /etc/nginx/config/local.conf;
+
+    location / {
+        proxy_set_header X-Real-IP         $remote_addr;
+        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto https;
+        proxy_set_header X-Forwarded-Host  $http_host;
+        proxy_set_header Host              $http_host;
+        proxy_max_temp_file_size           0;
+        proxy_pass                         http://{{ internal_url }};
+        proxy_redirect                     http:// https://;
+
+
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection $connection_upgrade;
+    }
+}