server {
    listen       443 ssl http2;
    listen       [::]:443 ssl http2;
    server_name  {{ minio_console_domain }};
    root         /usr/share/nginx/html;

    ssl_certificate "{{ nginx_ssl_certificate }}";
    ssl_certificate_key "{{ nginx_ssl_certificate_key }}";
{% if nginx_ssl_ca_certificate is defined %}
    ssl_client_certificate "{{ nginx_ssl_ca_certificate }}";
{% endif %}
    ssl_session_cache {{ nginx_ssl_session_cache }};
    ssl_session_timeout  {{ nginx_ssl_session_timeout }};
    ssl_ciphers {{ nginx_ssl_ciphers|join(':') }};
    ssl_prefer_server_ciphers on;

    client_max_body_size 0;
    proxy_buffering off;
    proxy_request_buffering off;
    chunked_transfer_encoding off;

    proxy_connect_timeout 300;

    location / {
        proxy_set_header Host $http_host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;

        real_ip_header X-Real-IP;

        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";

        proxy_pass http://127.0.0.1:{{ minio_console_port }};
    }

    error_page 404 /404.html;
    location = /40x.html {}

    error_page 500 502 503 504 /50x.html;
    location = /50x.html {}
}