openhab-ansible/roles/openhab/templates/nginx.init.conf.j2

server {
    listen                          [::]:80 ipv6only=off;
    listen                          [::]:443 ipv6only=off ssl;
    server_name                     {{fqdn}};

    ssl_certificate                 /etc/nginx/ssl/nginx.crt;
    ssl_certificate_key             /etc/nginx/ssl/nginx.key;

    location / {
        proxy_pass                              http://localhost:8080/;
        proxy_buffering                         off;  # openHAB supports non-buffering specifically for SSEs now
        proxy_set_header Host                   $http_host;
        proxy_set_header X-Real-IP              $remote_addr;
        proxy_set_header X-Forwarded-For        $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto      $scheme;

        auth_basic                              "Openhab";
        auth_basic_user_file                    /etc/nginx/htpasswd;
     }
    location /.well-known/acme-challenge/ {
        root                                    /var/www/html;
    }

}