map $http_upgrade $connection_upgrade {
	default upgrade;
	'' close;
}

server {

	server_name auth.theribbles.org;

	location ~ {
		proxy_pass http://127.0.0.1:10030;
		proxy_set_header Upgrade $http_upgrade;
		proxy_set_header Connection $connection_upgrade;
		include /etc/nginx/proxy.conf;
	}

	listen [::]:443 ssl; # managed by Certbot
	listen 443 ssl; # managed by Certbot
	ssl_certificate /etc/letsencrypt/live/theribbles.org/fullchain.pem; # managed by Certbot
	ssl_certificate_key /etc/letsencrypt/live/theribbles.org/privkey.pem; # managed by Certbot
	include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
	ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}

server {

	server_name auth.suvereno.org;

	location ~ {
		proxy_pass http://127.0.0.1:10030;
		proxy_set_header Upgrade $http_upgrade;
		proxy_set_header Connection $connection_upgrade;
		include /etc/nginx/proxy.conf;
	}

	listen [::]:443 ssl; # managed by Certbot
	listen 443 ssl; # managed by Certbot
	ssl_certificate /etc/letsencrypt/live/suvereno.org/fullchain.pem; # managed by Certbot
	ssl_certificate_key /etc/letsencrypt/live/suvereno.org/privkey.pem; # managed by Certbot
	include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
	ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}

server {
	if ($scheme = http) {
		return 301 https://$host$request_uri;
	}

	server_name auth.theribbles.org auth.suvereno.org;
	listen 80;
	listen [::]:80;
	return 404; # managed by Certbot
}