server { listen 443 ssl; # IPv4 listen [::]:443 ssl; # IPv6 server_name my.hostname.com; ssl_certificate /path/to/fullchain.pem; ssl_certificate_key /path/to/privkey.pem; ssl_dhparam /path/to/ssl-dhparams.pem; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_read_timeout 600; location /.well-known/matrix/server { return 200 '{ "m.server": "my.hostname.com:443" }'; } location /.well-known/matrix/client { return 200 '{ "m.homeserver": { "base_url": "https://my.hostname.com" } }'; } location /_matrix { proxy_pass http://monolith:8008; } }