awdawdawd

server {
  listen 443;
  server_name portainer.amtmann.de;
  resolver 1.1.1.1 1.0.0.1 valid=1h;
  resolver_timeout 5s;

  ssl_certificate			/etc/nginx/certs/live/portainer.amtmann.de/fullchain.pem;
  ssl_certificate_key		/etc/nginx/certs/live/portainer.amtmann.de/privkey.pem;
  ssl_session_cache  builtin:1000  shared:SSL:10m;
  ssl_protocols  TLSv1.2 TLSv1.3;
  ssl_ciphers ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:HIGH:!aNULL:!eNULL:!EXPORT:!CAMELLIA:!DES:!MD5:!PSK:!RC4;
  ssl_prefer_server_ciphers on;
  ssl_session_tickets off;
  add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
  ssl_stapling on;
  ssl_stapling_verify on;
  ssl_trusted_certificate /etc/nginx/certs/live/chain.pem;
  add_header X-Frame-Options DENY;
  add_header X-Content-Type-Options nosniff;
  add_header X-XSS-Protection "1; mode=block";

  location / {
      proxy_http_version 1.1;
      proxy_set_header Connection "";
      proxy_pass http://service_portainer:9000/;
  }
  location /api/websocket/ {
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection "upgrade";
      proxy_http_version 1.1;
      proxy_pass http://service_portainer:9000/api/websocket/;
  }
}