nginx/homeassistant

server {
        listen 443 ssl http2;

        root /config/www;
        index index.html index.htm index.php;

        server_name ha.DIT_DOMIAN.duckdns.org;

        client_max_body_size 0;

        ssl_certificate /etc/letsencrypt/live/ha.DIT_DOMIAN.duckdns.org/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/live/ha.DIT_DOMIAN.duckdns.org/privkey.pem;
        ssl_protocols TLSv1.1 TLSv1.2;
        ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
        add_header Strict-Transport-Security "max-age=31536000; includeSubdomains";
        ssl_prefer_server_ciphers on;

        location / {
                proxy_pass http://homeassistant/;
                proxy_http_version 1.1;
                proxy_set_header Connection "";
        }

    location /api/websocket {
            proxy_pass http://homeassistant/api/websocket;
            proxy_set_header Host $host;

            proxy_http_version 1.1;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection "upgrade";
    }
}