# git service

server {
  listen 443 ssl;
  server_name git.20261001.xyz;
  
  gzip on;

  
  location / {
    proxy_redirect off;
    proxy_pass http://localhost:10880;

    proxy_set_header  Host                $http_host;
    proxy_set_header  X-Real-IP           $remote_addr;
    proxy_set_header  X-Forwarded-Ssl     on;
    proxy_set_header  X-Forwarded-For     $proxy_add_x_forwarded_for;
    proxy_set_header  X-Forwarded-Proto   $scheme;
    proxy_set_header  X-Frame-Options     SAMEORIGIN;

    client_max_body_size        100m;
    client_body_buffer_size     128k;

    proxy_buffer_size           4k;
    proxy_buffers               4 32k;
    proxy_busy_buffers_size     64k;
    proxy_temp_file_write_size  64k;
    
  }


    ssl_certificate /etc/letsencrypt/live/git.20261001.xyz/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/git.20261001.xyz/privkey.pem; # managed by Certbot
}