server {

    listen 443 ssl;
    server_name content.demo.com;

        ssl_certificate     /etc/ssl/acme/content.demo.com/fullchain.cer;
        ssl_certificate_key /etc/ssl/acme/content.demo.com/content.demo.com.key;

    ssl_session_cache  builtin:1000  shared:SSL:10m;
    ssl_protocols  TLSv1.1 TLSv1.2;
    ssl_ciphers HIGH:!aNULL:!eNULL:!EXPORT:!CAMELLIA:!DES:!MD5:!PSK:!RC4;
    ssl_prefer_server_ciphers on;

    access_log            /var/log/nginx/content.demo.com.access.log;
    error_log             /var/log/nginx/content.demo.com.error.log;
   
    # static files
    location ^~ /loleaflet {
      	proxy_pass          https://server.ip.address;
        	proxy_set_header Host $http_host;
    }

    # WOPI discovery URL
    location ^~ /hosting/discovery {
      	proxy_pass          https://server.ip.address;
        	proxy_set_header Host $http_host;
    }

   # main websocket
   location ~ ^/lool/(.*)/ws$ {
      	proxy_pass          https://server.ip.address;
       	proxy_set_header Upgrade $http_upgrade;
       	proxy_set_header Connection "Upgrade";
       	proxy_set_header Host $http_host;
       	proxy_read_timeout 36000s;
   }
   
   # download, presentation and image upload
   location ~ ^/lool {
      	proxy_pass          https://server.ip.address;
       	proxy_set_header Host $http_host;
   }
   
   # Admin Console websocket
   location ^~ /lool/adminws {
      	proxy_pass          https://server.ip.address;
      	proxy_set_header Upgrade $http_upgrade;
       	proxy_set_header Connection "Upgrade";
       	proxy_set_header Host $http_host;
       	proxy_read_timeout 36000s;
   }  
    location / {
      	proxy_pass          https://server.ip.address;
    }

    error_page  497 https://$host:$server_port$request_uri;
}