nginx.conf

user root;
worker_processes auto;
pid /run/nginx.pid;
include /etc/nginx/modules-enabled/*.conf;

events {
        worker_connections 768;
}

http {
        sendfile on;
        tcp_nopush on;
        tcp_nodelay on;
        keepalive_timeout 65;
        types_hash_max_size 2048;

        include /etc/nginx/mime.types;
        default_type application/octet-stream;

        ssl_protocols TLSv1.2 TLSv1.3;
        ssl_prefer_server_ciphers on;

        access_log /dev/stdout;
        error_log /dev/sederr;

        gzip on;

        server {
                listen [::]:80;
                listen 80;
                server_name _;

                location / {
                        proxy_pass http://127.0.0.1:8080;
                        proxy_set_header Host $host;
                        proxy_set_header X-Real-IP $remote_addr;

                        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                        proxy_set_header X-Forwarded-Proto $scheme;
                }

                location /notifications/hub {
                        proxy_pass http://127.0.0.1:3012;
                        proxy_set_header Upgrade $http_upgrade;
                        proxy_set_header Connection "upgrade";
                }

                location /notifications/hub/negotiate {
                        proxy_pass http://127.0.0.1:8080;
                }

                location /robots.txt {
                        default_type text/html;
                        add_header Content-Type "text/plain; charset=UTF-8";
                        return 200 "User-Agent: *\nDisallow: /";
                }
        }
}