server { listen 80; listen [::]:80; server_name lg.example.com; return 301 https://$host$request_uri; } server { listen [::]:443 ssl ipv6only=on; listen 443 ssl; ssl_certificate ssl_certificate_key client_max_body_size 2M; server_name lg.example.com; root /etc/hyperglass/static; location / { try_files $uri $uri/ /ui /ui/$uri =404; index /ui/index.html; } location /openapi.json { try_files $uri @proxy_to_app; } location /custom/ { try_files $uri $uri/ /custom; } location /images/ { try_files $uri $uri/ /images; } location /api { try_files $uri @proxy_to_app; } location @proxy_to_app { proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header Host $http_host; proxy_redirect off; proxy_pass http://[::1]:8001; } }