nginx

limit_req_zone $binary_remote_addr zone=one:10m rate=1r/s;
server {
    listen 80;
    listen [::]:80;
    return 301 https://blog.$server_name$request_uri;

    server_name ars-artificia.com;

    root /usr/share/nginx/html;
    index index.html index.htm;

    client_max_body_size 10M;

    location / {
        limit_req       zone=one burst=10 nodelay;
        proxy_pass http://localhost:2368;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Host $http_host;
        proxy_set_header X-Forwarded-Proto https;
        proxy_buffering off;
    }
}
server {
    listen 443 ssl;
    listen [::]:433 ipv6only=on default;
    server_name ars-artificia.com;

    ssl on;
    ssl_certificate /etc/letsencrypt/live/ars-artificia.com-0001/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/ars-artificia.com-0001/privkey.pem;

    root /usr/share/nginx/html;
    index index.html index.htm;

    client_max_body_size 10M;
    add_header X-Frame-Options "GOFORIT";

    location / {
        limit_req       zone=one burst=10 nodelay;
        proxy_pass http://localhost:2368;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Host $http_host;
        proxy_set_header X-Forwarded-Proto https;
        proxy_buffering off;
    }
}