terminate tls on asylum for secure local connections

1 files changed, 22 insertions, 0 deletions

diff --git a/nginx/terminate.conf b/nginx/terminate.conf
new file mode 100644
index 0000000..731feb2
--- /dev/null
+++ b/nginx/terminate.conf
@@ -0,0 +1,22 @@
+# %HOST% internal
+server {
+    listen 443 quic;
+    listen [::]:443 quic;
+    listen 443 ssl;
+    listen [::]:443 ssl;
+    server_name %HOST% *.%HOST%;
+    add_header alt-svc 'h3=":443"; ma=86400';
+    ssl_certificate /etc/tls/%HOST%.crt;
+    ssl_certificate_key /etc/tls/%HOST%.key;
+    location / {
+        proxy_pass http://127.0.0.1:80;
+        proxy_http_version 1.1;
+        proxy_redirect off;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto https;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection $connection_upgrade;
+    }
+}