server {
        listen 80;
        server_name auth.domain.com;
        return 301 https://$host$request_uri;
}
server {
    if ($host = auth.domain.com) {
    }
        listen 443 ssl http2; # managed by Certbot
        server_name auth.domain.com;
        charset utf-8;
        client_max_body_size 128M;
        return 404; # managed by Certbot

        ssl_certificate /etc/letsencrypt/live/auth.domain.com/fullchain.pem; # managed by Certbot
        ssl_certificate_key /etc/letsencrypt/live/auth.domain.com/privkey.pem; # managed by Certbot
        include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
        ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

        location / {
                access_log off;
                proxy_pass http://localhost:8080;
                proxy_redirect off;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header Host $host;
                proxy_set_header X-Forwarded-Proto https;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }
}