server { listen 80; listen [::]:80; listen 443 ssl; listen [::]:443 ssl; server_name {{var_vikunja_and_nginx_domain}}; ssl_certificate /etc/ssl/fullchains/{{var_vikunja_and_nginx_domain}}.pem; ssl_certificate_key /etc/ssl/private/{{var_vikunja_and_nginx_domain}}.pem; include /etc/nginx/ssl-hardening.conf; location / { proxy_pass http://localhost:3456; client_max_body_size 20M; } }