{
  enableACME = true;
  forceSSL = true;
  locations = {
    "/" = {
      proxyPass = "http://192.168.1.200:3001";
      proxyWebsockets = true;
      extraConfig =
        "proxy_ssl_server_name on;" +
        "proxy_pass_header Authorization;"
        ;
    };
  };
}