# https://github.com/dani-garcia/vaultwarden/wiki

### vaultwarden
upstream vaultwarden {
	zone vaultwarden 64k;
	server [::1]:4567;
	keepalive 2;
}

# Needed to support websocket connections
# See: https://nginx.org/en/docs/http/websocket.html
# Instead of "close" as stated in the above link we send an empty value.
# Else all keepalive connections will not work.
map $http_upgrade $connection_upgrade {
    default upgrade;
    ''      "";
}

server {
    listen [::]:443 ssl http2;
    server_name vaultwarden.domain.de;

	include /home/etc/nginx/snippets/header.conf;

	client_max_body_size 525M;

    location / {
		include /home/etc/nginx/snippets/proxy.conf;
        proxy_pass http://vaultwarden;
    }
}