upstream vaultwarden { zone vaultwarden 64k; server 127.0.0.1:${env['ports']['vaultwarden']}; keepalive 2; } server { listen 443 ssl; listen [::]:443 ssl; server_name vw.${env['domain']}; location / { proxy_pass http://vaultwarden; include /etc/nginx/snippets/websocket.conf; include /etc/nginx/snippets/proxy.conf; client_max_body_size 500M; } }