server {

    listen 443 ssl;

    server_name office.yourdomain.com;

    ssl_certificate /config/keys/letsencrypt/fullchain.pem;
    ssl_certificate_key /config/keys/letsencrypt/privkey.pem;
    ssl_dhparam /config/nginx/dhparams.pem;
    ssl_ciphers 'XXX';
    ssl_prefer_server_ciphers on;

    # static files
    location ^~ /loleaflet {
        include /config/nginx/proxy.conf;
        proxy_pass https://xxx.xxx.xx.xx:9980;
    }

    # WOPI discovery URL
    location ^~ /hosting/discovery {
        include /config/nginx/proxy.conf;
        proxy_pass https://xxx.xxx.xx.xx:9980;
    }

    # main websocket
    location ~ ^/lool/(.*)/ws$ {
        include /config/nginx/proxy.conf;
        proxy_pass https://xxx.xxx.xx.xx:9980;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "Upgrade";
        proxy_set_header Host $http_host;
    }

    # download, presentation and image upload
    location ~ ^/lool {
        include /config/nginx/proxy.conf;
        proxy_pass https://xxx.xxx.xx.xx:9980;
    }

    # Admin Console websocket
    location ^~ /lool/adminws {
        include /config/nginx/proxy.conf;
        proxy_pass https://xxx.xxx.xx.xx:9980;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "Upgrade";
        proxy_set_header Host $http_host;
    }
}