# vault.gaems.at
server {
	listen 443 ssl;
	server_name vault.gaems.at;

	ssl_certificate		/etc/letsencrypt/live/gaems.at/fullchain.pem;
	ssl_certificate_key	/etc/letsencrypt/live/gaems.at/privkey.pem;

	location / {
		proxy_pass http://vaultwarden;
		proxy_set_header Host $host;
		proxy_set_header X-Real-IP $remote_addr;
		proxy_set_header X-Forwarded-Proto $scheme;
	}
}