site.conf

server {
  listen       80 default_server;
  listen       [::]:80 default_server;
  server_name  ;
  error_log off;
  access_log off;
  server_tokens off;
  client_max_body_size 0;
  return 301 https://$host$request_uri;
}

server {
  listen 443 ssl http2;
  listen [::]:443 ssl http2;
  server_name .searx.toch.ga;

  include /etc/nginx/ssl/ssl.conf;

  location / {
    proxy_pass http://localhost:5088;
    proxy_set_header        Host                 $host;
    proxy_set_header        X-Real-IP            $remote_addr;
    proxy_set_header        X-Forwarded-For      $proxy_add_x_forwarded_for;
    proxy_set_header        X-Remote-Port        $remote_port;
    proxy_set_header        X-Forwarded-Proto    $scheme;
    proxy_set_header        X-Outside-Url        $scheme://$host;
    proxy_redirect          off;
  }

}

server {
  listen 443 ssl http2;
  listen [::]:443 ssl http2;
  server_name .keeweb.toch.ga;

  include /etc/nginx/ssl/ssl.conf;

  location / {
    proxy_pass              https://127.0.0.1:23443;
    proxy_set_header        Host                 $host;
    proxy_set_header        X-Real-IP            $remote_addr;
    proxy_set_header        X-Forwarded-For      $proxy_add_x_forwarded_for;
    proxy_set_header        X-Remote-Port        $remote_port;
    proxy_set_header        X-Forwarded-Proto    $scheme;
    proxy_set_header        X-Outside-Url        $scheme://$host;
    proxy_redirect          off;
  }

}