server {
    listen 443 ssl;
    listen [::]:443 ssl;

    server_name stdisco.{{ domain }};

    ssl_verify_client optional_no_ca;

    location / {
        proxy_pass http://127.0.0.1:{{ ports['syncthing_discosrv'] }};

        proxy_set_header X-Client-Port $remote_port;
        proxy_set_header X-SSL-Cert $ssl_client_cert;
        include /etc/nginx/snippets/websocket.conf;
    }
}