map $http_upgrade $connection_upgrade {
    default upgrade;
    ''      close;
}

server {
	listen       443 ssl http2;
	listen       [::]:443 ssl http2;
	server_name  jupyter.rolroralra.com;
	#root         /usr/share/nginx/html;

	# Load configuration files for the default server block.
	#include /etc/nginx/default.d/*.conf;
	include /etc/nginx/default.d/certbot_ssl.conf;	# managed by Certbot

  add_header Strict-Transport-Security max-age=15768000;

	# Managing literal requests to the JupyterHub front end
	location / {
		proxy_pass       http://localhost:8888;
		proxy_set_header X-Real-IP $remote_addr;
		proxy_set_header Host $host;
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

		# websocket headers
		proxy_http_version 1.1;
		proxy_set_header Upgrade $http_upgrade;
		proxy_set_header Connection $connection_upgrade;

		proxy_buffering off;
	}

 	#Managing requests to verify letsencrypt host
 	location ~ /.well-known {
 		allow all;
 	}


	error_page 404 /404.html;
		location = /40x.html {
	}

	error_page 500 502 503 504 /50x.html;
		location = /50x.html {
	}
}