server {
	set $forward_scheme <<PROXY_SCHEME>>;
	set $server         "<<PROXY_IP>>";
	set $port           <<PROXY_PORT>>;

	listen 80;
	listen 443 ssl;

	server_name <<SERVER_NAME>>;
	
	<<SECURE>>

	include conf.d/include/letsencrypt-acme-challenge.conf;
	include conf.d/include/ssl-ciphers.conf;
	#ssl_certificate <<NM_CERTPATH>>/live/<<MAIN_SITE>>/fullchain.pem;
	#ssl_certificate_key <<NM_CERTPATH>>/live/<<MAIN_SITE>>/privkey.pem;

	access_log /var/log/nginx/<<MAIN_SITE>>.proxy.log proxy;
	error_log /var/log/nginx/<<MAIN_SITE>>.error.log warn;
	
	<<EXPLOITS>>
	<<WEBSOCKET>>
	<<HSTS>>

	location / {
		<<WEBSOCKET>>
		<<HSTS>>
		include conf.d/include/force-ssl.conf;
		include conf.d/include/proxy.conf;
	}
}