nginx

things/rocketchat/for-nginx.conf

+server {
+  listen 80;
+  listen 443 ssl http2;
+  server_name chat.momobako.com;
+  ssl_certificate   certs/yuzurisa.com/fullchain.pem;
+  ssl_certificate_key certs/yuzurisa.com/privkey.pem;
+  if ($https != "on") {
+    return 301 https://$host$request_uri;
+  }
+  add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always;
+  location / {
+    proxy_pass http://myrocketchat:3000;
+    proxy_http_version 1.1;
+    proxy_set_header Upgrade $http_upgrade;
+    proxy_set_header Connection "upgrade";
+    proxy_set_header Host $http_host;
+
+    proxy_set_header X-Real-IP $remote_addr;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto https;
+    proxy_set_header X-Nginx-Proxy true;
+
+    proxy_redirect off;
+  }
+}