upstream vaultwarden {
    zone vaultwarden 64k;
    server 127.0.0.1:${env['ports']['vaultwarden']};
    keepalive 2;
}

server {
    listen 443 ssl;
    listen [::]:443 ssl;

    server_name vw.${env['domain']};

    location / {
        proxy_pass http://vaultwarden;

        include /etc/nginx/snippets/websocket.conf;
        include /etc/nginx/snippets/proxy.conf;
    }
}