worker_processes 1;
error_log /dev/stdout notice;
pid /tmp/pid;
daemon off;

events {}

http {
	resolver 8.8.8.8:53;

	acme_issuer local_pebble {
		uri         https://0.0.0.0:14000/dir;
		contact     ava@sunnypup.io;
		state_path  /tmp;
		accept_terms_of_service;
	}

	acme_shared_zone zone=ngx_acme_shared:1M;

	server {
		listen 443 ssl;
		server_name mylocalwebsite.com;

		acme_certificate local_pebble;

		ssl_certificate       $acme_certificate;
		ssl_certificate_key   $acme_certificate_key;

		# do not parse the certificate on each request
		ssl_certificate_cache max=2;

		location / {
			proxy_pass http://echo.sunnypup.io;
		}
	}

	server {
		# listener on port 80 is required to process ACME HTTP-01 challenges
		listen 80;

		location / {
			return 404;
		}
	}
}