server 
    {
        listen 80;
        server_name dashy.abc.com;  # 你的域名
    
        # 将 HTTP 请求重定向到 HTTPS
        location / {
            return 301 https://$server_name$request_uri;
        }
    }
server 
    {
        listen 443 ssl;
        http2 on;
        server_name dashy.abc.com;
    
        ssl_certificate /www/server/panel/vhost/letsencrypt/dashy.abc.com/fullchain.pem;  # 你的域名
        ssl_certificate_key /www/server/panel/vhost/letsencrypt/dashy.abc.com/privkey.pem;  # 你的域名
    
        ssl_protocols TLSv1.2 TLSv1.3;
        ssl_ciphers 'TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384';
        ssl_prefer_server_ciphers on;
        
        location / {
        proxy_pass http://127.0.0.1:端口/;  # 你的端口
        proxy_ssl_server_name on;
        proxy_ssl_name 127.0.0.1;  

        # WebSocket（必需）
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
    
        # 转发头（含前缀）
        proxy_set_header Host                $host;
        proxy_set_header X-Real-IP           $remote_addr;
        proxy_set_header X-Forwarded-For     $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto   $scheme;
        client_max_body_size 200m;
        # proxy_set_header X-Forwarded-Prefix  /jellyfin;
    
        # 播放长连
        proxy_read_timeout 3600;
        proxy_send_timeout 3600;
        proxy_buffering off;
        proxy_request_buffering off;
    
        # 不让上游改写 Location
        proxy_redirect off;
        }
        
    }