dashboard.k8s-cluster.example.org.conf

server {
        if ($host = dashboard.k8s-cluster.example.org) {
                return 301 https://$host$request_uri;
        } # managed by Certbot


        listen 80;
        server_name dashboard.k8s-cluster.example.org;
        root /var/www/letsencrypt;
        location /.well-known/ {
                try_files $uri $uri/ =404;
        }
        return 301 https://$server_name$request_uri;
}

server {
        #listen [::]:443 ssl http2 ipv6only=on;
        listen 443 ssl http2;
        server_name dashboard.k8s-cluster.example.org;
        #ssl on;
        ssl_prefer_server_ciphers on;
        ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
        access_log  /var/log/nginx/dashboard.k8s-cluster.example.org.access.log;
        error_log   /var/log/nginx/dashboard.k8s-cluster.example.org.error.log;
        allow all;
        client_max_body_size 1000m;
        location / {
            proxy_pass  http://192.168.3.37:312468;
            proxy_set_header    Host    $http_host;
            proxy_set_header    X-Real-IP   $http_host;
            proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header    X-Forwarded-Proto   $scheme;
            proxy_read_timeout  900;
        }

    ssl_certificate /etc/letsencrypt/live/dashboard.k8s-cluster.example.org/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/dashboard.k8s-cluster.example.org/privkey.pem; # managed by Certbot
}