server { listen 443 ssl; server_name articles.octt.eu.org; ssl_certificate /etc/letsencrypt/live/articles.octt.eu.org/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/articles.octt.eu.org/privkey.pem; ssl_prefer_server_ciphers on; location / { proxy_http_version 1.1; proxy_pass http://octt.ddns.net:8036; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; proxy_set_header Accept-Encoding ""; # Needed for sub_filter sub_filter ' href="http://octt.ddns.net:8036/' ' href="https://articles.octt.eu.org/'; sub_filter ' src="http://octt.ddns.net:8036/' ' src="https://articles.octt.eu.org/'; sub_filter_once off; } }