server {
  listen          443 ssl;
  listen          [::]:443 ssl;

  server_name nocauth-idm.yandex.net default_server;
  client_max_body_size  64M;
  keepalive_timeout 5;
  proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  proxy_set_header Host $http_host;
  proxy_redirect off;

  ssl_certificate_key "/etc/nginx/ssl/nocauth-idm.yandex.net.key";
  ssl_certificate "/etc/nginx/ssl/nocauth-idm.yandex.net.crt";

  # idm
  location /idm/ {
    rewrite ^/idm(.*)$ $1 break;
    proxy_pass http://localhost:6690;
  }
}
