server {
    listen 443 quic;
    listen 443 ssl;
    listen [::]:443 quic;
    listen [::]:443 ssl;

    server_name conorz.at;

    include snippets/hsts.conf;
    include snippets/security.conf;
    include snippets/quic.conf;
    include snippets/proxy.conf;
    include snippets/robots.conf;
    include snippets/universal_paths.conf;

    add_header Cross-Origin-Resource-Policy "same-origin" always;
    add_header Cross-Origin-Opener-Policy "same-origin" always;

    ssl_certificate /etc/letsencrypt/live/conorz.at/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/conorz.at/privkey.pem;
    ssl_trusted_certificate /etc/letsencrypt/live/conorz.at/cert.pem;

    error_page 404 /404.html;

    location = /404.html {
      root /website/dist;
      internal;
    }
    error_page 403 /403.html;

    location = /403.html {
      root /website/dist;
      internal;
    }
    client_max_body_size 128M;

    location / {
      root /website/dist;
      index index.html;
    }

    
    location ^~ /_matrix/ {
        proxy_pass http://127.0.0.1:8008;
    }
}