# Wraps LB API http connections to https
#
server {
	http_status_bypass on;
	# You need to replace localhost to the ip address of the internal
	# network interface to allow access from the network.
	listen 127.0.0.1:8443 ssl reuseport default_server;
	listen [::1]:8443 ssl ipv6only=on reuseport default_server;

	http2 on;

	root /var/www/html;
	index index.html index.htm;
	server_name _;

	botguard_check off;

	# You need to replace this certificate stubs to the
	# real certificate issued to the hostname.
	ssl_certificate /etc/ssl/certs/ssl-cert-snakeoil.pem;
	ssl_certificate_key /etc/ssl/private/ssl-cert-snakeoil.key;

	location / {
		try_files /stub @backend;
	}

	location @backend {
		proxy_pass http://127.0.0.1:1623;
		include proxy_params;
	}
}
