server {
	listen 443 quic;
	listen [::]:443 quic;
	listen 443 ssl;
	listen [::]:443 ssl;
	server_name %HOST% *.%HOST%;
	add_header alt-svc 'h3=":443"; ma=86400';
	ssl_certificate /etc/tls/%HOST%.crt;
	ssl_certificate_key /etc/tls/%HOST%.key;
	location / {
		proxy_pass http://[fd74:5ca2:5071::1]:80;
		proxy_http_version 1.1;
		proxy_redirect off;
		proxy_set_header Host $host;
		proxy_set_header X-Real-IP $remote_addr;
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_set_header X-Forwarded-Proto https;
		proxy_set_header Upgrade $http_upgrade;
		proxy_set_header Connection $connection_upgrade;
	}
}