{{#ReverseProxy}}
server {
    listen {{port}}{{#https}} ssl{{/https}}{{^fqdn}} default_server{{/fqdn}};
    listen [::]:{{port}}{{#https}} ssl{{/https}}{{^fqdn}} default_server{{/fqdn}};

    {{#resolver}}
    include conf.d/.resolve.conf*;
    set $backend "{{backend}}";
    {{/resolver}}

    {{#fqdn}}
    server_name {{fqdn}} {{#mdns}}{{fqdn}}.local{{/mdns}};
    {{#mdns}}if ( $host !~ "(^{{fqdn}}$|^{{fqdn}}.local$)" ) { return 404; }{{/mdns}}
    {{^mdns}}if ( $host !~ "(^{{fqdn}}$)" ) { return 404; }{{/mdns}}
    {{/fqdn}}
    {{^fqdn}}
    server_name _;
    {{/fqdn}}


    {{#https}}
    {{> /usr/syno/share/nginx/https.mustache}}
    {{/https}}
    proxy_ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;

    {{> /usr/syno/share/nginx/acl.mustache}}

    location / {
        {{#customize_header_variable}}
        if (${{&.}} = false) {
            set ${{&.}} '';
        }
        {{/customize_header_variable}}

        {{#advanced}}
        {{directive}} {{value}};
        {{/advanced}}

        {{#customize_headers}}
        proxy_set_header        {{&name}}            {{&value}};
        {{/customize_headers}}

        {{#resolver}}
        proxy_pass $backend;
        {{/resolver}}
        {{^resolver}}
        proxy_pass {{backend}};
        {{/resolver}}
    }

    {{#letsencrypt}}
    {{> /usr/syno/share/nginx/LetsEncrypt}}
    {{/letsencrypt}}

    {{> /usr/syno/share/nginx/error_page}}
}
{{/ReverseProxy}}