---

acme_domains:
 - pad.bitlair.nl

etherpad_domain: pad.bitlair.nl

nginx_sites:
  - server_name: "pad.bitlair.nl"
#    localproxy: "9001"
    pre_config:
      - "# WebSocket proxying - from https://nginx.org/en/docs/http/websocket.html"
      - "map $http_upgrade $connection_upgrade {"
      - "   default upgrade;"
      - "   ''      close;"
      - "}"
    config:
      - "location / {"
      - "  proxy_pass http://localhost:9001/;"
      - "  include proxy_params;"
      - ""
      - "  # WebSocket proxying - from https://nginx.org/en/docs/http/websocket.html"
      - "  proxy_set_header  Upgrade $http_upgrade;"
      - "  proxy_set_header  Connection $connection_upgrade;"
      - "}"

group_nft_input:
  - "tcp dport { http, https } accept # Allow web-traffic from world"