server {
    listen [::]:80 default_server ipv6only=off;

    location / {
        return 301 https://$host:443$request_uri;
    }

    location /.well-known/acme-challenge/ {
        root /etc/acme.sh.d;
    }

    location = /vm-ping {
        add_header Content-Type text/plain;
        return 200 "vm-pong";
    }
}

server {
    listen [::]:443 ssl http2 default_server ipv6only=off;

    location / {
        proxy_pass http://127.0.0.1:8080;
    }

    location /static {
        root /srv/vm;
    }

    error_page 502 /502.html;
    location = /502.html {
        root /srv/vm/templates;
    }

    location = /vm-ping {
        add_header Content-Type text/plain;
        return 200 "vm-pong";
    }
}