default

server {
        listen 80;
        server_name raptorbot.ddns.net;
        return 301 https://$server_name$request_uri;
}
server {
        listen 443 ssl;
        server_name raptorbot.ddns.net;
        ssl on;
    
    # For self signed certs
    # ssl_certificate /etc/nginx/cert.crt;
    # ssl_certificate_key /etc/nginx/cert.key;
    
    # For Let's Encrypt certs
    ssl_certificate /etc/letsencrypt/live/raptorbot.ddns.net/fullchain.pem; # /etc/nginx/cert.crt;
    ssl_certificate_key /etc/letsencrypt/live/raptorbot.ddns.net/privkey.pem; # /etc/nginx/cert.key;
    
    # Things for better security
    ssl_session_cache shared:SSL:10m;
    # I am using all modern devices and browsers and don't need TLSv1 if you need it, add to the list below
    ssl_protocols TLSv1.1 TLSv1.2;
    ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
    ssl_prefer_server_ciphers on;
    ssl_dhparam /etc/ssl/certs/dhparam.pem;

    # For quicker streaming updates in HA. Thanks @stephenmg12
    proxy_buffering off;

    location / {
            proxy_pass http://localhost:8123;
    }
}