server {
    listen                  212.109.196.217:443 ssl;
    listen                  [2a01:230:4:700::6969]:443 ssl;

    server_name             cit.csasq.ru;
    server_tokens           off;

    ssl_certificate         /etc/letsencrypt/live/csasq.ru/fullchain.pem;
    ssl_certificate_key     /etc/letsencrypt/live/csasq.ru/privkey.pem;

    keepalive_timeout       30;

    location / {
        include                 /opt/cit-is-bot/nginx/secure-headers.conf;
        include                 ./conf.d/http-proxy.conf;

        proxy_pass              http://frontend.cit.csasq.ru;
    }

    location /ws {
        include                 /opt/cit-is-bot/nginx/secure-headers.conf;
        include                 ./conf.d/ws-proxy.conf;

        proxy_pass              http://cit.csasq.ru;
    }

    location /static/ {
        include                 /opt/cit-is-bot/nginx/secure-headers.conf;
        include                 ./conf.d/gzip.conf;

        root                    /opt/cit-is-bot;
        expires                 -1;

        add_header              Service-Worker-Allowed /;
    }
}