server {
        listen      80;
        server_name variator.group www.variator.group;

        return 301 https://$host$request_uri;
}

server {
        listen      443 ssl http2;
        server_name variator.group www.variator.group;

        access_log  /var/log/variator.group.ssl.access.log;
        error_log   /var/log/variator.group.ssl.error.log;

	ssl_certificate /etc/letsencrypt/live/variator.group/fullchain.pem;
	ssl_certificate_key /etc/letsencrypt/live/variator.group/privkey.pem;
#	include /etc/letsencrypt/options-ssl-nginx.conf;
#	ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;

        location / {
                proxy_pass   http://192.168.122.6:80;
                proxy_set_header HOST $host;
                proxy_set_header X-Forwarded-Proto $scheme;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_http_version      1.1;
		proxy_set_header        Upgrade $http_upgrade;
		proxy_set_header        Connection 'upgrade';
		proxy_cache_bypass      $http_upgrade;
		add_header X-Frame-Options SAMEORIGIN;
		add_header X-Content-Type-Options nosniff;
		add_header X-XSS-Protection "1; mode=block";
		add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload";
		add_header Referrer-Policy "strict-origin";
		add_header Permissions-Policy "geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()";
		add_header 'Content-Security-Policy' 'upgrade-insecure-requests';
                client_max_body_size 0;
                proxy_buffers  16 32k;
                proxy_buffer_size 64k;
                proxy_connect_timeout 600s;
                proxy_send_timeout    600s;
                proxy_read_timeout    600s;
                send_timeout          600s;
		server_tokens	off;
#		auth_basic "Для доступа к сайту введите пароль:";
#		auth_basic_user_file /etc/nginx/.htpasswd;
        }

}