server {
    listen      443 ssl http2;
    server_name irc.aninix.net;

    include conf/sec.conf;
    include conf/default.csp.conf;
    include conf/letsencrypt.conf;

    location /
    {
        root /usr/share/kiwiirc;
        autoindex on;
        autoindex_format html;
    }

    location /websocket/ {
        proxy_pass http://unix:/run/inspircd/websocket.sock;

        proxy_http_version 1.1;

        proxy_set_header Host        $host;
        proxy_set_header Upgrade     $http_upgrade;
        proxy_set_header Connection  "upgrade";

        proxy_set_header X-Original-Host      $host;
        proxy_set_header X-Original-Protocol  $scheme;
        proxy_set_header X-Real-IP            $remote_addr;

        proxy_set_header X-Forwarded-Host   $host;
        proxy_set_header X-Forwarded-Proto  $scheme;
        proxy_set_header X-Forwarded-For    $remote_addr;
    }
}