samwiseetc/nginx/sites-available/novnc

upstream vnc_proxy {
    server mnemosyne.natalieandjoshua.com:6080;
}

server {
    listen  443;
    server_name vpn.ovalwonder.com;
    location /websockify {
          proxy_http_version 1.1;
          proxy_pass http://vnc_proxy/;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";

          # VNC connection timeout
          proxy_read_timeout 61s;

          # Disable cache
          proxy_buffering off;
    }

    location / {
          proxy_pass http://vnc_proxy/;
          proxy_http_version 1.1;
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header Connection "upgrade";
    }

location /wetty {
    proxy_pass http://127.0.0.1:9123/wetty;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_read_timeout 2073600;

    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header Host $http_host;
    proxy_set_header X-NginX-Proxy true;
}

location ^~ /munin-cgi/munin-cgi-graph/ {
    fastcgi_split_path_info ^(/munin-cgi/munin-cgi-graph)(.*);
    fastcgi_param PATH_INFO $fastcgi_path_info;
    fastcgi_pass unix:/var/run/munin/fastcgi-graph.sock;
    include fastcgi_params;
}
location /munin/static/ {
    alias /etc/munin/static/;

}

location /squeeze {
    proxy_pass http://pippen:9000;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_read_timeout 2073600;

    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header Host $http_host;
    proxy_set_header X-NginX-Proxy true;
}
location /munin/ {
    proxy_pass http://localhost:4948/;

}

    ssl on;
    ssl_certificate /etc/dehydrated/certs/vpn.ovalwonder.com/fullchain.pem;
    ssl_certificate_key /etc/dehydrated/certs/vpn.ovalwonder.com/privkey.pem;
    ssl_protocols TLSv1.2;

}