nginx jitsi proxy

server {
    server_name jitsi.bubuit.net;

    add_header Strict-Transport-Security "max-age=7200";

    location / {
        proxy_pass http://10.0.3.LXC-IP;
        proxy_ignore_client_abort on;
        include    proxy_params;
    }    

    location ~ ^/colibri-ws/jvb/(.*) {
        proxy_pass http://10.0.3.LXC-IP:9090/colibri-ws/jvb/$1$is_args$args;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        tcp_nodelay on;
    }

   listen 80; # managed by Certbot
     ssl_stapling on;
     ssl_stapling_verify on;

     add_header Strict-Transport-Security "max-age=63072000; includeSubDomains" always;
     add_header Referrer-Policy strict-origin;
     add_header X-Frame-Options "DENY";
     add_header X-Content-Type-Options nosniff;
     add_header X-XSS-Protection "1; mode=block";
     add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; img-src 'self'; style-src 'self' 'unsafe-inline'; font-src 'self'; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; form-action 'none'; block-all-mixed-content";
     add_header Feature-Policy "geolocation 'none'; camera 'self'; microphone 'self'; speaker 'self'; autoplay 'none'; battery 'none'; accelerometer 'none'; autoplay 'none'; payment 'none';";
}