server { server_name vault.shad.moe www.vault.shad.moe; ssl_certificate /etc/letsencrypt/live/vault.shad.moe/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/vault.shad.moe/privkey.pem; ssl_trusted_certificate /etc/letsencrypt/live/vault.shad.moe/fullchain.pem; include snippets/global/common-ssl.conf; include snippets/proxy/common-proxy-headers.conf; location / { proxy_pass http://vaultwarden; } location /admin { return 403; } include snippets/global/errors/http-cat-error-pages.conf; }