upstream plexupstream {
    server localhost:32400;
}

server {
    listen 80;
    listen [::]:80;

    server_name mydomain.com www.mydomain.com 192.168.0.30;

    proxy_set_header    Host        		$http_host;
    proxy_set_header    X-Real-IP       	$remote_addr;
    proxy_set_header    X-Forwarded-for 	$remote_addr;
    proxy_set_header    X-Forwarded-Proto   $scheme;

    location / {
        proxy_pass https://localhost:5001;
    }

    location ^~ /.well-known/acme-challenge {
        root /var/lib/letsencrypt;
        default_type text/plain;
    }

	location /sonarr {
        proxy_pass http://localhost:8989;
    }

	location /radarr{
        proxy_pass http://localhost:7878;
    }

	location /plex {
		proxy_pass http://plexupstream;
	}
}

server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;

    server_name mydomain.com www.mydomain.com 192.168.0.30;

    ssl_certificate /usr/syno/etc/certificate/ReverseProxy/fullchain.pem;

    ssl_certificate_key /usr/syno/etc/certificate/ReverseProxy/privkey.pem;

    add_header Strict-Transport-Security "max-age=15768000; includeSubdomains; preload" always;

    proxy_set_header    Host        		$http_host;
    proxy_set_header    X-Real-IP       	$remote_addr;
    proxy_set_header    X-Forwarded-for 	$remote_addr;
    proxy_set_header    X-Forwarded-Proto   $scheme;

    location / {
        proxy_pass https://localhost:5001;
    }

	location /sonarr {
        proxy_pass http://localhost:8989;
    }

	location /radarr{
        proxy_pass http://localhost:7878;
    }

	location /plex {
		proxy_pass http://plexupstream;
	}
}