server {
    listen                  212.109.196.217:443 ssl;
    listen                  [2a01:230:4:700::6969]:443 ssl;

    server_name             risk-calc.csasq.ru;
    server_tokens           off;

    ssl_certificate         /etc/letsencrypt/live/csasq.ru/fullchain.pem;
    ssl_certificate_key     /etc/letsencrypt/live/csasq.ru/privkey.pem;

    keepalive_timeout       5;

    location / {
        include                 /opt/risk-calc.csasq.ru/nginx/secure-headers.conf;
        include                 ./conf.d/http-proxy.conf;

        proxy_pass              http://risk-calc.csasq.ru;
    }

    location /static/ {
        include                 /opt/risk-calc.csasq.ru/nginx/secure-headers.conf;
        include                 ./conf.d/gzip.conf;

        root                    /opt/risk-calc.csasq.ru;
        expires                 1d;
    }
}