cryptpad_ynh/conf/nginx.conf

server_name __DOMAIN__ __SANDBOXDOMAIN__;

more_set_headers "Strict-Transport-Security: 'max-age=63072000; includeSubDomains' always";

location / {
    proxy_pass            http://127.0.0.1:__PORT__;
    proxy_set_header      X-Real-IP $remote_addr;
    proxy_set_header      Host $host;
    proxy_set_header      X-Forwarded-For $proxy_add_x_forwarded_for;
    client_max_body_size  150m;

    proxy_http_version    1.1;
    proxy_set_header      Upgrade $http_upgrade;
    proxy_set_header      Connection upgrade;
}

location ^~ /cryptpad_websocket {
    proxy_pass            http://127.0.0.1:__PORT_SOCKET__;
    proxy_set_header      X-Real-IP $remote_addr;
    proxy_set_header      Host $host;
    proxy_set_header      X-Forwarded-For $proxy_add_x_forwarded_for;

    proxy_http_version    1.1;
    proxy_set_header      Upgrade $http_upgrade;
    proxy_set_header      Connection upgrade;
}