server {
    listen 80;
    server_name baikal.ixvd.net;

    # SSL is managed by certbot, no need for a ssl listen; it will be generated automagically!

    # default html page
    location / {
        proxy_set_header Host $host;
        proxy_pass http://baikal;
    }
}