nginx-proxy/default.conf

server {
	root /usr/share/nginx/html;
  access_log syslog:server=10.8.0.3:514,tag=nginx_access main;
  location /robots.txt {
    try_files $uri $uri/ /index.html;
    }

	index index.html index.htm index.nginx-debian.html;
  server_name hbpn.link www.hbpn.link; # managed by Certbot
  client_max_body_size 70M;


  add_header Last-Modified $date_gmt;
  add_header Cache-Control 'private no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0';
  if_modified_since off;
  expires off;
  etag off;


  location /404 {
     try_files $uri $uri/ /index.html;
  }

  
  location /answer/ {
    if ($request_method = OPTIONS) {
    add_header Access-Control-Allow-Origin $http_origin always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,x-sessionkey,device,browser,os,devicetype,response-type always;
    add_header Access-Control-Expose-Headers x-sessionkey,devicetype always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;

      return 200;
    }

    add_header Access-Control-Allow-Origin $http_origin always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,x-sessionkey,device,browser,os,devicetype,response-type always;
    add_header Access-Control-Expose-Headers x-sessionkey,devicetype always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;

    proxy_pass http://10.8.0.9:1490/;
  }

	location /answer/v1.0.0/ {	
    proxy_set_header Referer $host;
    proxy_set_header Origin $http_origin;
    proxy_set_header Connection '';
    proxy_http_version 1.1;
    chunked_transfer_encoding off;
    proxy_buffering off;
    proxy_cache off;

    if ($request_method = OPTIONS) {
    add_header Access-Control-Allow-Origin $http_origin always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,x-sessionkey,device,browser,os,devicetype,response-type always;
    add_header Access-Control-Expose-Headers x-sessionkey,devicetype always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;

      return 200;
    }

    add_header Access-Control-Allow-Origin $http_origin always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,x-sessionkey,device,browser,os,devicetype,response-type always;
    add_header Access-Control-Expose-Headers x-sessionkey,devicetype always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;

    proxy_pass http://10.6.0.26:1491/;
  }
  
  location /squizimages {
    add_header Access-Control-Allow-Origin $http_origin always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type always;
    add_header Access-Control-Allow-Methods GET;
    chunked_transfer_encoding off;
    proxy_buffering off;
    proxy_cache off;
    proxy_pass https://storage.yandexcloud.net;
  }

  location / {
    add_header Access-Control-Allow-Origin $http_origin always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PUT;
    proxy_pass http://respondent;
	}

  listen 443 ssl; # managed by Certbot
  ssl_certificate /etc/nginx/certs/live/pena.digital/fullchain.pem; # managed by Certbot
  ssl_certificate_key /etc/nginx/certs/live/pena.digital/privkey.pem; # managed by Certbot

}
server {
	root /usr/share/nginx/html;
  access_log syslog:server=10.8.0.3:514,tag=nginx_access main;
  location /robots.txt {
    try_files $uri $uri/ /index.html;
    }

	index index.html index.htm index.nginx-debian.html;
  server_name quiz.pena.digital; # managed by Certbot
  client_max_body_size 70M;


  add_header Last-Modified $date_gmt;
  add_header Cache-Control 'private no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0';
  if_modified_since off;
  expires off;
  etag off;


  location /404 {
     try_files $uri $uri/ /index.html;
  }

  location /auth {
    proxy_hide_header Access-Control-Allow-Origin;
    add_header Access-Control-Allow-Origin quiz.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    proxy_pass http://10.8.0.226:59300;
  }
  
  location /user/ {
    add_header Access-Control-Allow-Origin quiz.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_pass http://10.8.0.226:59300;
  }

  location /heruvym/ {
    add_header Access-Control-Allow-Origin quiz.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,sess,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_set_header Referer $host;
    proxy_set_header Origin $http_origin;
    proxy_set_header Connection '';
    proxy_http_version 1.1;
    chunked_transfer_encoding off;
    proxy_buffering off;
    proxy_cache off;
    proxy_pass http://10.8.0.226:1488/;
  }
  location /heruvym/v1.0.0/ {
    add_header Access-Control-Allow-Origin quiz.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,sess,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_set_header Referer $host;
    proxy_set_header Origin $http_origin;
    proxy_set_header Connection '';
    proxy_http_version 1.1;
    chunked_transfer_encoding off;
    proxy_buffering off;
    proxy_cache off;
    proxy_pass http://10.8.0.226:1487/;
  }

  location /strator/ {
    add_header Access-Control-Allow-Origin quiz.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_pass http://10.6.0.9:59303/;
  }

  location /customer/ {
    add_header Access-Control-Allow-Origin quiz.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_pass http://10.6.0.9:8065/;
  }
  location /customer/v1.0.1/ {
    add_header Access-Control-Allow-Origin quiz.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
		proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Client-Port $remote_port;
    proxy_set_header Origin $host;
    proxy_pass http://10.6.0.9:8066/;
  }

  location /codeword/ {
    add_header Access-Control-Allow-Origin quiz.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
		proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Client-Port $remote_port;
    proxy_set_header Origin $host;
    proxy_pass http://10.6.0.9:59664/;
  }
  location /codeword/v1.0.0/ {
    add_header Access-Control-Allow-Origin quiz.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
		proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Client-Port $remote_port;
    proxy_set_header Origin $host;
    proxy_pass http://10.6.0.9:59664/;
  }

  location /price/ {
    add_header Access-Control-Allow-Origin quiz.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_pass http://10.6.0.9:8001/;
  }

  location /verification1 {
    add_header Access-Control-Allow-Origin quiz.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,response-type always;
    add_header Access-Control-Allow-Methods GET;
    chunked_transfer_encoding off;
    proxy_buffering off;
    proxy_cache off;
    proxy_pass https://storage.yandexcloud.net;
  }
  
  location /answer/ {
    add_header Access-Control-Allow-Origin quiz.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,x-sessionkey,response-type always;
    add_header Access-Control-Expose-Headers x-sessionkey always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_pass http://10.8.0.9:1490/;
  }

	location /answer/v1.0.0/ {	
    proxy_set_header Referer $host;
    proxy_set_header Origin $http_origin;
    proxy_set_header Connection '';
    proxy_http_version 1.1;
    chunked_transfer_encoding off;
    proxy_buffering off;
    proxy_cache off;

    if ($request_method = OPTIONS) {
    add_header Access-Control-Allow-Origin $http_origin always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,x-sessionkey,device,browser,os,devicetype,response-type always;
    add_header Access-Control-Expose-Headers x-sessionkey,devicetype always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;

      return 200;
    }

    add_header Access-Control-Allow-Origin $http_origin always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,x-sessionkey,device,browser,os,devicetype,response-type always;
    add_header Access-Control-Expose-Headers x-sessionkey,devicetype always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;

    proxy_pass http://10.6.0.26:1491/;
  }
	location /squiz/amocrm/ {

    proxy_set_header Referer $host;
    proxy_set_header Origin $http_origin;
    proxy_set_header Connection '';
    proxy_http_version 1.1;
    chunked_transfer_encoding off;
    proxy_buffering off;
    proxy_cache off;

    if ($request_method = OPTIONS) {
      return 200;
    }

    proxy_pass http://10.6.0.26:1492/amocrm/;
  }
	location /squiz/amocrm/oauth/ {

    proxy_set_header Referer $host;
    proxy_set_header Origin $http_origin;
    proxy_set_header Connection '';
    proxy_http_version 1.1;
    chunked_transfer_encoding off;
    proxy_buffering off;
    proxy_cache off;

    if ($request_method = OPTIONS) {
    add_header Access-Control-Allow-Origin $http_origin always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,device,browser,os,devicetype,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
      return 200;
    }
    add_header Access-Control-Allow-Origin $http_origin always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,device,browser,os,devicetype,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_pass http://10.6.0.26:1492/webhook/create/;
  }


  location /squiz/ {
    add_header Access-Control-Allow-Origin quiz.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_pass http://10.6.0.26:1488/;
  }

  location /squizstorer/ {
    add_header Access-Control-Allow-Origin quiz.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_set_header Referer $host;
    proxy_set_header Origin $http_origin;
    proxy_set_header Connection '';
    proxy_http_version 1.1;
    chunked_transfer_encoding off;
    proxy_buffering off;
    proxy_cache off;
    proxy_pass http://10.6.0.26:1489/;
  }
  location /squizstorer/v1.0.0/ {
    add_header Access-Control-Allow-Origin quiz.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_set_header Referer $host;
    proxy_set_header Origin $http_origin;
    proxy_set_header Connection '';
		proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Client-Port $remote_port;
    proxy_set_header Origin $host;
    proxy_http_version 1.1;
    chunked_transfer_encoding off;
    proxy_buffering off;
    proxy_cache off;
    proxy_pass http://10.6.0.26:1589/;
  }

  location /squizimages {
    add_header Access-Control-Allow-Origin quiz.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,response-type always;
    add_header Access-Control-Allow-Methods GET;
    chunked_transfer_encoding off;
    proxy_buffering off;
    proxy_cache off;
    proxy_pass https://storage.yandexcloud.net;
  }

  location / {
    proxy_pass http://squiz;
	}

  listen 443 ssl; # managed by Certbot
  ssl_certificate /etc/nginx/certs/live/pena.digital/fullchain.pem; # managed by Certbot
  ssl_certificate_key /etc/nginx/certs/live/pena.digital/privkey.pem; # managed by Certbot

}
server {
	root /usr/share/nginx/html;
  access_log syslog:server=10.8.0.3:514,tag=nginx_access main;
  location /robots.txt {
    try_files $uri $uri/ /index.html;
    }

	index index.html index.htm index.nginx-debian.html;
  server_name penaquiz.online www.penaquiz.online; # managed by Certbot
  client_max_body_size 70M;


  add_header Last-Modified $date_gmt;
  add_header Cache-Control 'private no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0';
  if_modified_since off;
  expires off;
  etag off;


  location /404 {
     try_files $uri $uri/ /index.html;
  }

  location /auth {
    proxy_hide_header Access-Control-Allow-Origin;
    add_header Access-Control-Allow-Origin penaquiz.online always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    proxy_pass http://10.8.0.226:59300;
  }
  
  location /user/ {
    add_header Access-Control-Allow-Origin penaquiz.online always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_pass http://10.8.0.226:59300;
  }

  location /heruvym/ {
    add_header Access-Control-Allow-Origin penaquiz.online always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,sess,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_set_header Referer $host;
    proxy_set_header Origin $http_origin;
    proxy_set_header Connection '';
    proxy_http_version 1.1;
    chunked_transfer_encoding off;
    proxy_buffering off;
    proxy_cache off;
    proxy_pass http://10.8.0.226:1488/;
  }
  location /heruvym/v1.0.0/ {
    add_header Access-Control-Allow-Origin quiz.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,sess,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_set_header Referer $host;
    proxy_set_header Origin $http_origin;
    proxy_set_header Connection '';
		proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Client-Port $remote_port;
    proxy_set_header Origin $host;
    proxy_http_version 1.1;
    chunked_transfer_encoding off;
    proxy_buffering off;
    proxy_cache off;
    proxy_pass http://10.8.0.226:1487/;
  }

  location /strator/ {
    add_header Access-Control-Allow-Origin penaquiz.online always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_pass http://10.6.0.9:59303/;
  }

  location /customer/ {
    add_header Access-Control-Allow-Origin penaquiz.online always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_pass http://10.6.0.9:8065/;
  }
  location /customer/v1.0.1/ {
    add_header Access-Control-Allow-Origin quiz.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
		proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Client-Port $remote_port;
    proxy_set_header Origin $host;
    proxy_pass http://10.6.0.9:8066/;
  }

  location /codeword/ {
    add_header Access-Control-Allow-Origin penaquiz.online always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
		proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Client-Port $remote_port;
    proxy_set_header Origin $host;
    proxy_pass http://10.6.0.9:59664/;
  }
  location /codeword/v1.0.0/ {
    add_header Access-Control-Allow-Origin quiz.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
		proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Client-Port $remote_port;
    proxy_set_header Origin $host;
    proxy_pass http://10.6.0.9:59664/;
  }

  location /price/ {
    add_header Access-Control-Allow-Origin penaquiz.online always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_pass http://10.6.0.9:8001/;
  }

  location /verification1 {
    add_header Access-Control-Allow-Origin penaquiz.online always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,response-type always;
    add_header Access-Control-Allow-Methods GET;
    chunked_transfer_encoding off;
    proxy_buffering off;
    proxy_cache off;
    proxy_pass https://storage.yandexcloud.net;
  }
  
  location /answer/ {
    add_header Access-Control-Allow-Origin penaquiz.online always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,x-sessionkey,response-type always;
    add_header Access-Control-Expose-Headers x-sessionkey always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_pass http://10.8.0.9:1490/;
  }
	location /answer/v1.0.0/ {	
    proxy_set_header Referer $host;
    proxy_set_header Origin $http_origin;
    proxy_set_header Connection '';
    proxy_http_version 1.1;
    chunked_transfer_encoding off;
    proxy_buffering off;
    proxy_cache off;

    if ($request_method = OPTIONS) {
    add_header Access-Control-Allow-Origin $http_origin always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,x-sessionkey,device,browser,os,devicetype,response-type always;
    add_header Access-Control-Expose-Headers x-sessionkey,devicetype always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;

      return 200;
    }

    add_header Access-Control-Allow-Origin $http_origin always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,x-sessionkey,device,browser,os,devicetype,response-type always;
    add_header Access-Control-Expose-Headers x-sessionkey,devicetype always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;

    proxy_pass http://10.6.0.26:1491/;
  }
	location /squiz/amocrm/ {

    proxy_set_header Referer $host;
    proxy_set_header Origin $http_origin;
    proxy_set_header Connection '';
    proxy_http_version 1.1;
    chunked_transfer_encoding off;
    proxy_buffering off;
    proxy_cache off;

    if ($request_method = OPTIONS) {
      return 200;
    }

    proxy_pass http://10.6.0.26:1492/amocrm/;
  }
	location /squiz/amocrm/oauth/ {

    proxy_set_header Referer $host;
    proxy_set_header Origin $http_origin;
    proxy_set_header Connection '';
    proxy_http_version 1.1;
    chunked_transfer_encoding off;
    proxy_buffering off;
    proxy_cache off;

    if ($request_method = OPTIONS) {
    add_header Access-Control-Allow-Origin $http_origin always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,device,browser,os,devicetype,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
      return 200;
    }
    add_header Access-Control-Allow-Origin $http_origin always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,device,browser,os,devicetype,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_pass http://10.6.0.26:1492/webhook/create/;
  }

  location /squiz/ {
    add_header Access-Control-Allow-Origin penaquiz.online always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_pass http://10.6.0.26:1488/;
  }

  location /squizstorer/ {
    add_header Access-Control-Allow-Origin penaquiz.online always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_set_header Referer $host;
    proxy_set_header Origin $http_origin;
    proxy_set_header Connection '';
    proxy_http_version 1.1;
    chunked_transfer_encoding off;
    proxy_buffering off;
    proxy_cache off;
    proxy_pass http://10.6.0.26:1489/;
  }
  location /squizstorer/v1.0.0/ {
    add_header Access-Control-Allow-Origin quiz.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_set_header Referer $host;
    proxy_set_header Origin $http_origin;
    proxy_set_header Connection '';
		proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Client-Port $remote_port;
    proxy_set_header Origin $host;
    proxy_http_version 1.1;
    chunked_transfer_encoding off;
    proxy_buffering off;
    proxy_cache off;
    proxy_pass http://10.6.0.26:1589/;
  }

  location /squizimages {
    add_header Access-Control-Allow-Origin penaquiz.online always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,response-type always;
    add_header Access-Control-Allow-Methods GET;
    chunked_transfer_encoding off;
    proxy_buffering off;
    proxy_cache off;
    proxy_pass https://storage.yandexcloud.net;
  }

  location / {
    proxy_pass http://squiz;
	}

  listen 443 ssl; # managed by Certbot
  ssl_certificate /etc/nginx/certs/live/pena.digital/fullchain.pem; # managed by Certbot
  ssl_certificate_key /etc/nginx/certs/live/pena.digital/privkey.pem; # managed by Certbot

}
server {
	root /usr/share/nginx/html;
  access_log syslog:server=10.8.0.3:514,tag=nginx_access main;
  location /robots.txt {
    try_files $uri $uri/ /index.html;
    }

	index index.html index.htm index.nginx-debian.html;
  server_name penaquiz.ru www.penaquiz.ru; # managed by Certbot
  client_max_body_size 70M;


  add_header Last-Modified $date_gmt;
  add_header Cache-Control 'private no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0';
  if_modified_since off;
  expires off;
  etag off;


  location /404 {
     try_files $uri $uri/ /index.html;
  }

  location /auth {
    proxy_hide_header Access-Control-Allow-Origin;
    add_header Access-Control-Allow-Origin penaquiz.ru always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    proxy_pass http://10.8.0.226:59300;
  }
  
  location /user/ {
    add_header Access-Control-Allow-Origin penaquiz.ru always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_pass http://10.8.0.226:59300;
  }

  location /heruvym/ {
    add_header Access-Control-Allow-Origin penaquiz.ru always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,sess,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_set_header Referer $host;
    proxy_set_header Origin $http_origin;
    proxy_set_header Connection '';
    proxy_http_version 1.1;
    chunked_transfer_encoding off;
    proxy_buffering off;
    proxy_cache off;
    proxy_pass http://10.8.0.226:1488/;
  }
  location /heruvym/v1.0.0/ {
    add_header Access-Control-Allow-Origin quiz.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,sess,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_set_header Referer $host;
    proxy_set_header Origin $http_origin;
    proxy_set_header Connection '';
    proxy_http_version 1.1;
    chunked_transfer_encoding off;
    proxy_buffering off;
    proxy_cache off;
    proxy_pass http://10.8.0.226:1487/;
  }

  location /strator/ {
    add_header Access-Control-Allow-Origin penaquiz.ru always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_pass http://10.6.0.9:59303/;
  }

  location /customer/ {
    add_header Access-Control-Allow-Origin penaquiz.ru always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_pass http://10.6.0.9:8065/;
  }
  location /customer/v1.0.1/ {
    add_header Access-Control-Allow-Origin quiz.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
		proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Client-Port $remote_port;
    proxy_set_header Origin $host;
    proxy_pass http://10.6.0.9:8066/;
  }

  location /codeword/ {
    add_header Access-Control-Allow-Origin penaquiz.ru always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
		proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Client-Port $remote_port;
    proxy_set_header Origin $host;
    proxy_pass http://10.6.0.9:59664/;
  }
  location /codeword/v1.0.0/ {
    add_header Access-Control-Allow-Origin quiz.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
		proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Client-Port $remote_port;
    proxy_set_header Origin $host;
    proxy_pass http://10.6.0.9:59664/;
  }

  location /price/ {
    add_header Access-Control-Allow-Origin penaquiz.ru always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_pass http://10.6.0.9:8001/;
  }

  location /verification1 {
    add_header Access-Control-Allow-Origin penaquiz.ru always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,response-type always;
    add_header Access-Control-Allow-Methods GET;
    chunked_transfer_encoding off;
    proxy_buffering off;
    proxy_cache off;
    proxy_pass https://storage.yandexcloud.net;
  }
  
  location /answer/ {
    add_header Access-Control-Allow-Origin penaquiz.ru always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,x-sessionkey,response-type always;
    add_header Access-Control-Expose-Headers x-sessionkey always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_pass http://10.8.0.9:1490/;
  }
	location /answer/v1.0.0/ {	
    proxy_set_header Referer $host;
    proxy_set_header Origin $http_origin;
    proxy_set_header Connection '';
    proxy_http_version 1.1;
    chunked_transfer_encoding off;
    proxy_buffering off;
    proxy_cache off;

    if ($request_method = OPTIONS) {
    add_header Access-Control-Allow-Origin $http_origin always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,x-sessionkey,device,browser,os,devicetype,response-type always;
    add_header Access-Control-Expose-Headers x-sessionkey,devicetype always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;

      return 200;
    }

    add_header Access-Control-Allow-Origin $http_origin always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,x-sessionkey,device,browser,os,devicetype,response-type always;
    add_header Access-Control-Expose-Headers x-sessionkey,devicetype always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;

    proxy_pass http://10.6.0.26:1491/;
  }

	location /squiz/amocrm/ {

    proxy_set_header Referer $host;
    proxy_set_header Origin $http_origin;
    proxy_set_header Connection '';
    proxy_http_version 1.1;
    chunked_transfer_encoding off;
    proxy_buffering off;
    proxy_cache off;

    if ($request_method = OPTIONS) {
      return 200;
    }

    proxy_pass http://10.6.0.26:1492/amocrm/;
  }
	location /squiz/amocrm/oauth/ {

    proxy_set_header Referer $host;
    proxy_set_header Origin $http_origin;
    proxy_set_header Connection '';
    proxy_http_version 1.1;
    chunked_transfer_encoding off;
    proxy_buffering off;
    proxy_cache off;

    if ($request_method = OPTIONS) {
    add_header Access-Control-Allow-Origin $http_origin always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,device,browser,os,devicetype,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
      return 200;
    }
    add_header Access-Control-Allow-Origin $http_origin always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,device,browser,os,devicetype,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_pass http://10.6.0.26:1492/webhook/create/;
  }
  location /squiz/ {
    add_header Access-Control-Allow-Origin penaquiz.ru always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_pass http://10.6.0.26:1488/;
  }

  location /squizstorer/ {
    add_header Access-Control-Allow-Origin penaquiz.ru always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_set_header Referer $host;
    proxy_set_header Origin $http_origin;
    proxy_set_header Connection '';
    proxy_http_version 1.1;
    chunked_transfer_encoding off;
    proxy_buffering off;
    proxy_cache off;
    proxy_pass http://10.6.0.26:1489/;
  }
  location /squizstorer/v1.0.0/ {
    add_header Access-Control-Allow-Origin quiz.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_set_header Referer $host;
    proxy_set_header Origin $http_origin;
    proxy_set_header Connection '';
		proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Client-Port $remote_port;
    proxy_set_header Origin $host;
    proxy_http_version 1.1;
    chunked_transfer_encoding off;
    proxy_buffering off;
    proxy_cache off;
    proxy_pass http://10.6.0.26:1589/;
  }

  location /squizimages {
    add_header Access-Control-Allow-Origin penaquiz.ru always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,response-type always;
    add_header Access-Control-Allow-Methods GET;
    chunked_transfer_encoding off;
    proxy_buffering off;
    proxy_cache off;
    proxy_pass https://storage.yandexcloud.net;
  }

  location / {
    proxy_pass http://squiz;
	}

  listen 443 ssl; # managed by Certbot
  ssl_certificate /etc/nginx/certs/live/pena.digital/fullchain.pem; # managed by Certbot
  ssl_certificate_key /etc/nginx/certs/live/pena.digital/privkey.pem; # managed by Certbot

}
server {
	root /usr/share/nginx/html;
  access_log syslog:server=10.8.0.3:514,tag=nginx_access main;

	index index.html index.htm index.nginx-debian.html;
  server_name hub.pena.digital; # managed by Certbot
  client_max_body_size 70M;
  location /robots.txt {
    try_files $uri $uri/ /index.html;
    }

  add_header Last-Modified $date_gmt;
  add_header Cache-Control 'private no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0';
  if_modified_since off;
  expires off;
  etag off;


  location /404 {
     try_files $uri $uri/ /index.html;
  }

  location / {
    proxy_pass http://hub;
	}


  location /treasurer/ {
    if ($request_method = OPTIONS) {
    add_header Access-Control-Allow-Origin $http_origin always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
      return 200;
    }
    add_header Access-Control-Allow-Origin $http_origin always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_pass http://10.6.0.9:8085/;
  }


  location /auth {
    proxy_hide_header Access-Control-Allow-Origin;
    add_header Access-Control-Allow-Origin hub.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    proxy_pass http://10.8.0.226:59300;
  }
  
  location /user/ {
    add_header Access-Control-Allow-Origin hub.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_pass http://10.8.0.226:59300;
  }

  location /heruvym/ {
    add_header Access-Control-Allow-Origin hub.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,sess,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_set_header Referer $host;
    proxy_set_header Origin $http_origin;
    proxy_set_header Connection '';
    proxy_http_version 1.1;
    chunked_transfer_encoding off;
    proxy_buffering off;
    proxy_cache off;
    proxy_pass http://10.8.0.226:1488/;
  }
  location /heruvym/v1.0.0/ {
    add_header Access-Control-Allow-Origin quiz.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,sess,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_set_header Referer $host;
    proxy_set_header Origin $http_origin;
    proxy_set_header Connection '';
    proxy_http_version 1.1;
    chunked_transfer_encoding off;
    proxy_buffering off;
    proxy_cache off;
    proxy_pass http://10.8.0.226:1487/;
  }

  location /strator/ {
    add_header Access-Control-Allow-Origin hub.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_pass http://10.6.0.9:59303/;
  }

  location /customer/ {
    add_header Access-Control-Allow-Origin hub.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_pass http://10.6.0.9:8065/;
  }
  location /customer/v1.0.1/ {
    add_header Access-Control-Allow-Origin quiz.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
		proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Client-Port $remote_port;
    proxy_set_header Origin $host;
    proxy_pass http://10.6.0.9:8066/;
  }

  location /codeword/ {
    add_header Access-Control-Allow-Origin hub.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
		proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Client-Port $remote_port;
    proxy_set_header Origin $host;
    proxy_pass http://10.6.0.9:59664/;
  }
  location /codeword/v1.0.0/ {
    add_header Access-Control-Allow-Origin quiz.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
		proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Client-Port $remote_port;
    proxy_set_header Origin $host;
    proxy_pass http://10.6.0.9:59664/;
  }

  location /price/ {
    add_header Access-Control-Allow-Origin hub.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_pass http://10.6.0.9:8001/;
  }

  location /verification1 {
    add_header Access-Control-Allow-Origin hub.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,response-type always;
    add_header Access-Control-Allow-Methods GET;
    chunked_transfer_encoding off;
    proxy_buffering off;
    proxy_cache off;
    proxy_pass https://storage.yandexcloud.net;
  }

  location /verification/v1.0.0/ {
    add_header Access-Control-Allow-Origin hub.pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
    add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
    proxy_set_header Referer $host;
    proxy_set_header Origin $http_origin;
    proxy_set_header Connection '';
		proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Client-Port $remote_port;
    proxy_set_header Origin $host;
    proxy_http_version 1.1;
    chunked_transfer_encoding off;
    proxy_buffering off;
    proxy_cache off;
    proxy_pass http://10.6.0.9:7037/;
  }

  listen 443 ssl; # managed by Certbot
  ssl_certificate /etc/nginx/certs/live/pena.digital/fullchain.pem; # managed by Certbot
  ssl_certificate_key /etc/nginx/certs/live/pena.digital/privkey.pem; # managed by Certbot

}
server {
	root /usr/share/nginx/html;

	index index.html index.htm index.nginx-debian.html;
  server_name pena.digital www.pena.digital; # managed by Certbot
  client_max_body_size 70M;
  location /robots.txt {
    try_files $uri $uri/ /index.html;
    }

  add_header Last-Modified $date_gmt;
  add_header Cache-Control 'private no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0';
  if_modified_since off;
  expires off;
  etag off;


  location /404 {
     try_files $uri $uri/ /index.html;
  }

  location /feedback/ {
    add_header Access-Control-Allow-Origin pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,response-type always;
    proxy_set_header Host $host;
    proxy_pass http://10.8.0.226:8006/;
  }
  location / {
    proxy_pass http://services;
	}

  listen 443 ssl; # managed by Certbot
  ssl_certificate /etc/nginx/certs/live/pena.digital/fullchain.pem; # managed by Certbot
  ssl_certificate_key /etc/nginx/certs/live/pena.digital/privkey.pem; # managed by Certbot

}
server {
	root /usr/share/nginx/html;
  access_log syslog:server=10.8.0.3:514,tag=nginx_access main;

	index index.html index.htm index.nginx-debian.html;
  server_name tourism.pena.digital; # managed by Certbot
  client_max_body_size 70M;
  location /robots.txt {
    try_files $uri $uri/ /index.html;
    }

  add_header Last-Modified $date_gmt;
  add_header Cache-Control 'private no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0';
  if_modified_since off;
  expires off;
  etag off;


  location /404 {
     try_files $uri $uri/ /index.html;
  }

  location /feedback/ {
    add_header Access-Control-Allow-Origin pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,response-type always;
    proxy_set_header Host $host;
    proxy_pass http://10.8.0.8:8006/;
  }
  location / {
    proxy_pass http://tourizmland;
	}

  listen 443 ssl; # managed by Certbot
  ssl_certificate /etc/nginx/certs/live/pena.digital/fullchain.pem; # managed by Certbot
  ssl_certificate_key /etc/nginx/certs/live/pena.digital/privkey.pem; # managed by Certbot

}
server {
	root /usr/share/nginx/html;
  access_log syslog:server=10.8.0.3:514,tag=nginx_access main;

	index index.html index.htm index.nginx-debian.html;
  server_name solyanka.pena.digital; # managed by Certbot
  client_max_body_size 70M;

  location /robots.txt {
    try_files $uri $uri/ /index.html;
    }

  location /404 {
     try_files $uri $uri/ /index.html;
  }

  location /feedback/ {
    add_header Access-Control-Allow-Origin pena.digital always;
    add_header Access-Control-Allow-Credentials true always;
    add_header Access-Control-Allow-Headers content-type,response-type always;
    proxy_set_header Host $host;
    proxy_pass http://10.8.0.8:8006/;
  }
 #  location / {
 #    proxy_pass http://commonquiz;
	# }

  listen 443 ssl; # managed by Certbot
  ssl_certificate /etc/nginx/certs/live/pena.digital/fullchain.pem; # managed by Certbot
  ssl_certificate_key /etc/nginx/certs/live/pena.digital/privkey.pem; # managed by Certbot

}
server {
	listen 80 ;
	listen [::]:80 ;
  server_name _;
  
  location /.well-known/acme-challenge/ {
    root /var/www/certbot;
  }

  location /robots.txt {
    try_files $uri $uri/ /index.html;
    }

  location / {
    return 301 https://$host$request_uri;
  }
}