server {
    server_name {{ domain }};
    client_max_body_size 512m;
    underscores_in_headers on;

    location / {
        proxy_set_header    Host                $http_host;
        proxy_set_header    X-Real-IP           $remote_addr;
        proxy_set_header    X-Forwarded-For     $proxy_add_x_forwarded_for;
        proxy_set_header    X-Forwarded-Proto   $scheme;
        proxy_pass http://127.0.0.1:{{ proxy_port }}/;
	}

    listen [::]:443 ssl http2;
    listen 443 ssl http2;
    ssl_certificate /var/lib/acme/live/{{ domain }}/fullchain; # managed by acmetool
    ssl_certificate_key /var/lib/acme/live/{{ domain }}/privkey; # managed by acmetool
}