Sätta up reverse proxy (nån som är villig att hjälpa)

upstream plexserver {
        server 192.168.1.109:32400;
}
server {
        listen 80;
        listen [::]:80;
        server_name plex.domain.se;
        return 301 https://plex.domain.se$request_uri;
}

server {

        # SSL configuration
        listen 443 ssl;
        listen [::]:443 ssl;

        server_name  plex.domain.se;

        ssl_certificate /opt/letsencrypt/certs/domain.se/cert.chained.pem;
        ssl_certificate_key /opt/letsencrypt/certs/domain.se/privkey.pem;

        location / {
                proxy_pass  https://plexserver;
                proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
                proxy_redirect off;
                proxy_buffering off;
                proxy_set_header        Host            $host;
                proxy_set_header        X-Real-IP       $remote_addr;
                proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
        }
        location /:/websockets {
               proxy_pass  https://plexserver;
               proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
               proxy_redirect off;
               proxy_buffering off;
               proxy_http_version 1.1;
               proxy_set_header        Upgrade         $http_upgrade;
               proxy_set_header        Connection      "upgrade";
               proxy_set_header        Host            $host;
               proxy_set_header        X-Real-IP       $remote_addr;
               proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;

        }
}

server {
        listen 80;
        server_name unifi.sites.se;
        #index index.htm index.html index.nginx-debian.html;

        access_log      /var/log/nginx/unifi.access.log;
        error_log       /var/log/nginx/unifi.error.log;
        location / {
                rewrite ^/(.*)$ https://unifi.sites.se/$1 permanent;
        }

        location /inform {
                proxy_pass http://localhost:9080;

        }

        location /dl/ {
                proxy_pass http://localhost:9080;
        }

        location ~ /.well-known {
                root /var/www/html;
                allow all;
        }

}

server {
        listen 443 ssl http2;
        server_name unifi.sites.se;
        ssl_certificate /etc/letsencrypt/live/CERT/fullchain.pem; # managed by Certbot
        ssl_certificate_key /etc/letsencrypt/live/CERT/privkey.pem; # managed by Certbot
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
        ssl_prefer_server_ciphers on;
        ssl_ciphers ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384;
        ssl_ecdh_curve secp384r1;
        ssl_session_cache shared:SSL:10m;
        ssl_session_tickets off;
        ssl_stapling on;
        ssl_stapling_verify on;
        ssl_dhparam /etc/ssl/certs/dhparam.pem;
        resolver 8.8.8.8 8.8.4.4 valid=300s;
        resolver_timeout 5s;
        # Disable preloading HSTS for now.  You can use the commented out header line that includes
        # the "preload" directive if you understand the implications.
        add_header Strict-Transport-Security "max-age=63072000; includeSubdomains; preload";
        add_header Strict-Transport-Security "max-age=63072000; includeSubdomains";
        add_header X-Frame-Options DENY;
        add_header X-Content-Type-Options nosniff;

        access_log      /var/log/nginx/unifi.access.log;
        error_log       /var/log/nginx/unifi.error.log;


        proxy_cache off;
        proxy_store off;
        #proxy_ssl_verify off;
        #proxy_ssl_protocols SSLv2 SSLv3 TLSv1 TLSv1.1 TLSv1.2;

        #add_header X-XSS-Protection "1; mode=block";
        #add_header X-Frame-Options SAMEORIGIN;
        #add_header Strict-Transport-Security "max-age=31536000; includeSubdomains";

        location /inform {
                proxy_pass http://localhost:9080;
        }

        location /wss/ {
                proxy_pass https://localhost:9443;
                proxy_http_version 1.1;
                proxy_set_header Upgrade $http_upgrade;
                proxy_set_header Connection "upgrade";
                proxy_read_timeout 86400;
                proxy_buffering off;
                proxy_set_header Origin '';
        }

    location / {
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $host;
        proxy_pass https://localhost:9443;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_read_timeout 86400;
        proxy_buffering off;
    }

}