server {
  listen 127.0.0.1:9093;
  location / {
    proxy_pass https://localhost:{{ env "NOMAD_ALLOC_PORT_web-tls" }};
    proxy_ssl_certificate /secrets/alertmanager.bundle.pem;
    proxy_ssl_certificate_key /secrets/alertmanager.bundle.pem;
    proxy_ssl_verify on;
    proxy_ssl_name alertmanager-{{ env "NOMAD_ALLOC_INDEX" }}.monitoring;
    proxy_ssl_trusted_certificate /local/monitoring.ca.pem;
    allow 127.0.0.1;
    deny all;
  }
}