[nginx reverse proxy]

reverse_proxy.conf

server {
	listen 443 ssl http2;
	listen [::]:443 ssl http2;

	server_name selfagency.net;

	# SSL
	ssl_certificate /etc/letsencrypt/live/selfagency.net/fullchain.pem;
	ssl_certificate_key /etc/letsencrypt/live/selfagency.net/privkey.pem;
	ssl_trusted_certificate /etc/letsencrypt/live/selfagency.net/chain.pem;

	# security
	include nginxconfig.io/security.conf;

	# logging
	access_log /var/log/nginx/selfagency.net.access.log;
	error_log /var/log/nginx/selfagency.net.error.log warn;

	# reverse proxy
	location / {
		proxy_pass http://127.0.0.1:3013;
		include nginxconfig.io/proxy.conf;
	}

	# additional config
	include nginxconfig.io/general.conf;
}

# subdomains redirect
server {
	listen 443 ssl http2;
	listen [::]:443 ssl http2;

	server_name *.selfagency.net;

	# SSL
	ssl_certificate /etc/letsencrypt/live/selfagency.net/fullchain.pem;
	ssl_certificate_key /etc/letsencrypt/live/selfagency.net/privkey.pem;
	ssl_trusted_certificate /etc/letsencrypt/live/selfagency.net/chain.pem;

	return 301 https://selfagency.net$request_uri;
}

# HTTP redirect
server {
	listen 80;
	listen [::]:80;

	server_name .selfagency.net;

	include nginxconfig.io/letsencrypt.conf;

	location / {
		return 301 https://selfagency.net$request_uri;
	}
}