ha.mydomain.ru

map $http_upgrade $connection_upgrade {
    default upgrade;
    ''    close;
}
server {
	root /var/www/ha.mydomain.ru/html;
	index index.html index.htm index.nginx-debian.html;
	server_name ha.mydomain.ru www.ha.mydomain.ru;
        access_log /var/log/nginx/ha.mydomain.ru-access.log;
        error_log /var/log/nginx/ha.mydomain.ru-error.log;
	location / {
                proxy_pass http://vpn_lan_ip:8123;
                proxy_set_header Host $host;
                proxy_http_version 1.1;
                proxy_set_header Upgrade $http_upgrade;
                proxy_set_header Connection "upgrade";
	}

        location /api/websocket {
		proxy_pass http://vpn_lan_ip:8123/api/websocket;
		proxy_set_header Host $host;
		proxy_http_version 1.1;
		proxy_set_header Upgrade $http_upgrade;
		proxy_set_header Connection "upgrade";
        }

    listen [::]:443 ssl; # managed by Certbot
    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/ha.mydomain.ru/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/ha.mydomain.ru/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot


}
server {
    if ($host = www.ha.mydomain.ru) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


    if ($host = ha.mydomain.ru) {
        return 301 https://$host$request_uri;
    } # managed by Certbot


	listen 80;
	listen [::]:80;
	server_name ha.mydomain.ru www.ha.mydomain.ru;
    return 404; # managed by Certbot
}