server {
	listen 443 ssl http2;
	listen [::]:443 ssl http2;

	server_name tyil.net;

	ssl_certificate /etc/letsencrypt/live/tyil.net/fullchain.pem;
	ssl_certificate_key /etc/letsencrypt/live/tyil.net/privkey.pem;

	include /etc/nginx/snippets.d/certbot.conf;
	include /etc/nginx/snippets.d/headers.conf;
	include /etc/nginx/snippets.d/ssl.conf;

	auth_basic "Bad hacker!";
	auth_basic_user_file /var/www/net.tyil/htaccess;

	location /grafana/ {
		proxy_pass http://127.0.0.1:35300/;
	}

	location /plausible/ {
		proxy_pass http://127.0.0.1:8796/;
	}

	location /prometheus/ {
		proxy_pass http://127.0.0.1:9090/;
	}
}