Kapisi/roles/WebServer/files/conf.d/Yggdrasil/maat.conf

server {
    listen      443 ssl;
    http2 on;
    server_name maat.aninix.net;

    include conf/sec.conf;
    include conf/default.csp.conf;
    include conf/letsencrypt.conf;

    # GeoIP block
    if ($deny) { return 503; }

    location /
    {
      proxy_set_header Host $http_host;
      proxy_set_header X-Forwarded-Host $host;
      proxy_set_header X-Forwarded-Server $host;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_pass       http://maat.msn0.aninix.net:80;
      proxy_force_ranges on;
    }
}