server {
    listen 443 ssl;
    listen [::]:443 ssl;

    server_name stdisco.${env['domain']};

    ssl_verify_client optional_no_ca;

    location / {
        proxy_pass http://127.0.0.1:${env['ports']['syncthing_discosrv']};

        proxy_set_header X-Client-Port $remote_port;
        proxy_set_header X-SSL-Cert $ssl_client_cert;
        include /etc/nginx/snippets/websocket.conf;
        include /etc/nginx/snippets/proxy.conf;
    }
}