server {
    listen      443 ssl;
    http2 on;
    server_name yggdrasil.aninix.net;

    include conf/sec.conf;
    include conf/letsencrypt.conf;
    # include conf/default.csp.conf;

    # GeoIP block
    if ($deny) { return 503; }

    location /
    {
      proxy_set_header Host $http_host;
      proxy_set_header X-Forwarded-Host $host;
      proxy_set_header X-Forwarded-Server $host;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header X-Graylog-Server-URL https://$server_name/;
      proxy_pass       http://127.0.0.1:8096;
      proxy_force_ranges on;
    }
}