server {
    listen 443 ssl http2;
    server_name office.[DOMAIN];

    ssl_certificate /etc/letsencrypt/live/[DOMAIN]/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/[DOMAIN]/privkey.pem;

    location ^~ /browser {
        proxy_pass http://collaboraoffice:9980;
        proxy_set_header Host $http_host;
    }

    location ^~ /hosting/discovery {
        proxy_pass http://collaboraoffice:9980;
        proxy_set_header Host $http_host;
    }

    location ^~ /hosting/capabilities {
        proxy_pass http://collaboraoffice:9980;
        proxy_set_header Host $http_host;
    }

    location ~ ^/cool/(.*)/ws$ {
        proxy_pass http://collaboraoffice:9980;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "Upgrade";
        proxy_set_header Host $http_host;
        proxy_read_timeout 36000s;
    }

    location ~ ^/(c|l)ool {
        proxy_pass http://collaboraoffice:9980;
        proxy_set_header Host $http_host;
    }

    location ^~ /cool/adminws {
        proxy_pass http://collaboraoffice:9980;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "Upgrade";
        proxy_set_header Host $http_host;
        proxy_read_timeout 36000s;
    }
}