upstream radarr_backend { server radarr.servarr.svc; # server 192.168.88.50:7878; server 192.168.88.52:31084; server 1.1.1.1 backup; } server { server_name radarr.tryton.geeraert.eu www.radarr.tryton.geeraert.eu; location / { proxy_pass http://radarr_backend; } location /.well-known/acme-challenge/ { root /var/www/certbot; } proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection $http_connection; listen 443 ssl; # managed by Certbot ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem; ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem; #include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot #ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot } server { if ($host = www.radarr.tryton.geeraert.eu) { return 301 https://$host$request_uri; } # managed by Certbot if ($host = radarr.tryton.geeraert.eu) { return 301 https://$host$request_uri; } # managed by Certbot server_name www.radarr.tryton.geeraert.eu radarr.tryton.geeraert.eu; listen 80; return 404; # managed by Certbot }