http {
    resolver 127.0.0.11;
    upstream  web_server {
        server crusadetracker-app:8080;
    }

    server {
        listen 80;
        server_name crusadetracker.nerdfortress.dev;
        rewrite ^/(.*) https://$host/$1 permanent;
    }

    server {
        listen 443;
        server_name crusadetracker.nerdfortress.dev;
        ssl     on;
        ssl_certificate /certs/public/fullchain.pem;
        ssl_certificate_key     /certs/private/privkey.pem;
        ssl_protocols TLSv1.2 TLSv1.3;


        location / {
            proxy_pass http://web_server;
        }
    }
}

events {
    worker_connections 1024;
}