############################################ # config file for bookstack ############################################ upstream bookstack_backend { server webserver.bookstack.svc; server 1.1.1.1 backup; } server { server_name bookstack.tryton.geeraert.eu www.bookstack.tryton.geeraert.eu; location / { proxy_pass http://bookstack_backend; proxy_set_header Upgrade $http_upgrade; proxy_set_header Host $host; } location /.well-known/acme-challenge/ { root /var/www/certbot; } listen 443 ssl; ssl_certificate /etc/nginx/ssl/live/tryton.geeraert.eu/fullchain.pem; ssl_certificate_key /etc/nginx/ssl/live/tryton.geeraert.eu/privkey.pem; } server { if ($host = www.bookstack.tryton.geeraert.eu) { return 301 https://$host$request_uri; } if ($host = bookstack.tryton.geeraert.eu) { return 301 https://$host$request_uri; } server_name www.bookstack.tryton.geeraert.eu bookstack.tryton.geeraert.eu; listen 80; return 404; }