server {
    # SSL Key locations
    ssl_certificate     /etc/letsencrypt/live/${GITEA_DOMAIN}/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/${GITEA_DOMAIN}/privkey.pem;

    listen ${HTTPS_PORT} ssl;
    listen [::]:${HTTPS_PORT} ssl;
    server_name ${GITEA_DOMAIN};

    location / {
        resolver 127.0.0.11;
        proxy_pass http://#{GITEA_HOST}:3000/;

        # Static content caching
        location ~* \.(?:jpg|jpeg|png|gif|ico|css|js|ttf)$ {
            expires 1h;
            add_header Cache-Control public;

            proxy_pass http://${GITEA_HOST}:3000;
        }
    }
}