server {
    listen 443 ssl;
    listen [::]:443 ssl;

    server_name {{ stub_host }}.{{ local_domain }};

    access_log off;
    allow 192.168.20.12;
    deny all;

    include /config/nginx/ssl.conf;

    client_max_body_size 0;

    location /stub_status {
        include /config/nginx/resolver.conf;
        stub_status on;
        proxy_pass http://{{ stub_host }}.{{ aya01_host }}.{{ local_domain }};
    }
}