====== Jitsi.conf ======
<code bash>server {
    server_name jitsi.merrcloud.ru;
    return 301 https://$server_name$request_uri;
}

server {
    listen 443 ssl http2;
    server_name jitsi.merrcloud.ru;
    access_log /var/log/nginx/jitsi.access.log;
    error_log /var/log/nginx/jitsi.error.log;

    include /etc/nginx/snippets/sys.conf;

    ssl_certificate /etc/letsencrypt/live/jitsi.merrcloud.ru/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/jitsi.merrcloud.ru/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
    root /var/www/jitsi/;

    #client_max_body_size 4m;

    location / {
        auth_basic "Unauthorized";
        auth_basic_user_file /var/www/jitsi/.htpasswd;
        ssi on;
        proxy_pass https://172.17.16.14/;
        proxy_set_header X-Forwarded-For $remote_addr;
        proxy_set_header Host $http_host;
    }

    # BOSH
    location /http-bind {
        proxy_pass http://172.17.16.14:5280/http-bind;
        proxy_set_header X-Forwarded-For $remote_addr;
        proxy_set_header Host $http_host;
    }

    # xmpp websockets
    location /xmpp-websocket {
        proxy_pass              http://172.17.16.14:5280/xmpp-websocket;
        proxy_http_version      1.1;
        proxy_set_header        Upgrade $http_upgrade;
        proxy_set_header        Connection "upgrade";
        proxy_set_header        Host $host;
        tcp_nodelay             on;
    }

}</code>