server { listen 443 ssl ; listen [::]:443 ssl ; index index.html index.htm index.nginx-debian.html; server_name subdomain.dmz.rs subdomain.decentrala.org; ssl_certificate /etc/letsencrypt/live/subdomain.dmz.rs/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/subdomain.dmz.rs/privkey.pem; ssl_dhparam /etc/ssl/dhparam.pem; ssl_protocols TLSv1.2 TLSv1.3; ssl_ciphers HIGH:!aNULL:!MD5; location / { proxy_set_header Host subdomain.dmz.rs; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass http://CTIPADDRESS$request_uri; } location /.well-known/acme-challenge/ { root /var/www/subnodotdmzrs; } resolver 9.9.9.9; }