server {
  listen          443 ssl;
  server_name     {{ gogs_domain }};

  include /etc/nginx/ssl.conf

  # TODO set correct keys
  ssl_certificate                 /etc/nginx/ssl/server.pem;
  ssl_certificate_key             /etc/nginx/ssl/server.key;

  access_log  /var/log/nginx/{{ gogs_domain }}.access.log;
  error_log   /var/log/nginx/{{ gogs_domain }}.error.log;

  location / {
    proxy_http_version      1.1;
    proxy_set_header        Host $host;
    proxy_set_header        X-Real-IP $remote_addr;
    proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header        X-Forwarded-Proto $scheme;

    proxy_pass              http://localhost:{{ gogs_port }};
    proxy_redirect          off;
  }
  {% endif %}
}