server {

    listen 443 ssl;
    listen [::]:443 ssl;

    http2 on;

    ssl_certificate      /ssl/chain.crt;
    ssl_certificate_key  /ssl/certificate.keyplain;

    client_max_body_size 25m;

    access_log /var/log/nginx/synapse-access-{{ inventory_hostname }}.log main;
    access_log /var/log/nginx/access-{{ inventory_hostname }}.log main;
    error_log /var/log/nginx/synapse-error-{{ inventory_hostname }}.log notice;
    error_log /var/log/nginx/error-{{ inventory_hostname }}.log notice;

    error_page 403 404 /403_404.html;
    location = /403_404.html {
	    default_type application/json;
	    return 200 'You are not authorized to access this page.';
    }

    # All other matrix/synapse requests go to main
    location / {
      proxy_set_header X-Forwarded-For $remote_addr;
      proxy_set_header X-Forwarded-Proto $scheme;
      proxy_set_header Host $http_host;

      proxy_pass http://synapse-admin;
    }
}