server { listen [::]:80 ipv6only=off; listen [::]:443 ipv6only=off ssl; server_name schnidrig.dynv6.net; ssl_certificate /etc/nginx/ssl/nginx.crt; ssl_certificate_key /etc/nginx/ssl/nginx.key; location / { proxy_pass http://localhost:8080/; proxy_buffering off; # openHAB supports non-buffering specifically for SSEs now proxy_set_header Host $http_host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; auth_basic "Openhab"; auth_basic_user_file /etc/nginx/htpasswd; } location /.well-known/acme-challenge/ { root /var/www/html; } }