pid /tmp/nginx.pid;
error_log /dev/stderr info;

events {
    worker_connections 1024;
}

http {
    access_log /dev/stdout;
    server_tokens off;
    client_max_body_size 16m;
    client_body_temp_path /tmp/client-body;
    proxy_temp_path /tmp/proxy;

    server {
        listen 8443 ssl;
        ssl_certificate /run/secrets/tls.crt;
        ssl_certificate_key /run/secrets/tls.key;
        ssl_protocols TLSv1.2 TLSv1.3;
        ssl_session_cache shared:TLS:10m;
        ssl_session_tickets off;

        location / {
            proxy_http_version 1.1;
            proxy_pass http://127.0.0.1:8080;
            proxy_set_header Host $http_host;
            proxy_set_header X-Forwarded-For $remote_addr;
            proxy_set_header X-Forwarded-Proto https;
            proxy_request_buffering on;
            proxy_buffering off;
        }
    }
}