WeeChat Nginx Configuration Example

limit_req_zone $binary_remote_addr zone=weechat:10m rate=5r/m;
server {
        server_name <hostname>;

        access_log /var/log/nginx/weechat_access.log;
        error_log /var/log/nginx/weechat_error.log;

        listen 443 ssl;
        ssl_certificate /etc/letsencrypt/live/<domain>/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/<domain>/privkey.pem;

        location /weechat {
                gunzip on;
                gzip on;
                gzip_proxied any;
                gzip_types *;
                proxy_http_version 1.1;
                proxy_set_header Upgrade $http_upgrade;
                proxy_set_header Connection "Upgrade";
                proxy_read_timeout 604800;
                proxy_set_header Host $host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $remote_addr;
                proxy_pass http://unix:/home/<username>/.weechat/relay_socket:; # permissions granted via setfacl/getfacl
                limit_req zone=weechat burst=1 nodelay;
        }
}