upstream vaultwarden { zone vaultwarden 64k; server 127.0.0.1:{{ ports['vaultwarden'] }}; keepalive 2; } server { listen 443 ssl; listen [::]:443 ssl; server_name vw.{{ domain }}; location / { proxy_pass http://vaultwarden; include /etc/nginx/snippets/websocket.conf; include /etc/nginx/snippets/proxy.conf; } }