upstream tgbot { ip_hash; server tgbot:7777; } server { listen 8443 ssl; ssl_certificate /src/webhook_cert.pem; ssl_certificate_key /src/webhook_pkey.pem; location / { proxy_redirect off; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Host $server_name; proxy_pass http://tgbot/; } }