server { listen 8080; listen [::]:8080; server_name calendar.homelab0ne.xyz; return 301 https://$host$request_uri; } server { # listen 8443 ssl proxy_protocol; listen 8443 ssl; # deny all; # listen [::]:8443 ssl; # listen [::]:8444 ssl proxy_protocol; http2 on; server_name calendar.homelab0ne.xyz; client_max_body_size 20M; ssl_certificate /etc/nginx/ssl/cert.pem; ssl_certificate_key /etc/nginx/ssl/key.pem; ssl_protocols TLSv1.3 TLSv1.2; location / { proxy_pass http://radicale:5232; proxy_set_header Host $host; # proxy_set_header X-Real-IP $proxy_protocol_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-Protocol $scheme; proxy_set_header X-Forwarded-Host $http_host; proxy_buffering off; } }