server {
    listen 443 quic;
    listen 443 ssl;
    listen [::]:443 quic;
    listen [::]:443 ssl;

    server_name git.conorz.at;

    ssl_certificate /etc/letsencrypt/live/git.conorz.at/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/git.conorz.at/privkey.pem;
    ssl_trusted_certificate /etc/letsencrypt/live/git.conorz.at/chain.pem;

    include snippets/hsts.conf;
    include snippets/security.conf;
    include snippets/quic.conf;
    include snippets/proxy.conf;
    include snippets/robots.conf;
    include snippets/universal_paths.conf;

    add_header Cross-Origin-Resource-Policy "same-origin" always;
    add_header Cross-Origin-Opener-Policy "same-origin" always;

    location / {
        proxy_pass http://127.0.0.1:3004;
    }
}