server {
    listen 443 ssl;
    listen 443 quic;
    listen [::]:443 ssl;
    listen [::]:443 quic;

    server_name <domain>;

    ssl_certificate /etc/ssl/<domain>/fullchain.pem;
    ssl_certificate_key /etc/ssl/<domain>/key.pem;

    location / {
        proxy_pass http://<replace>;
        proxy_http_version 1.1;
        proxy_set_header Connection "";
    }

    location /.well-known/acme-challenge {
        root /var/www/html/<domain>;
    }
}