Debian 10 64 Bits – Installation Zammad (reverse proxy nginx)

apt-get -y install apt-transport-https sudo wget gnupg2
locale-gen fr_FR.UTF-8
echo "LANG=fr_FR.UTF-8" > /etc/default/locale

echo "deb https://artifacts.elastic.co/packages/7.x/apt stable main" > /etc/apt/sources.list.d/elastic-7.x.list
wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch | apt-key add -
apt-get update
apt-get install openjdk-11-jre-headless elasticsearch
/usr/share/elasticsearch/bin/elasticsearch-plugin install ingest-attachment
systemctl restart elasticsearch
systemctl enable elasticsearch

wget -qO- https://dl.packager.io/srv/zammad/zammad/key | apt-key add -
wget -O /etc/apt/sources.list.d/zammad.list https://dl.packager.io/srv/zammad/zammad/stable/installer/debian/10.repo
apt-get update
apt-get install zammad

zammad config:set ZAMMAD_BIND_IP=0.0.0.0
systemctl restart zammad

server {
    listen 443 ssl;
    server_name support.domain.com;
    # security - prevent information disclosure about server version
    server_tokens off;

    access_log /var/log/nginx/support.domain.com/access.log;
    error_log  /var/log/nginx/support.domain.com/error.log;
    
    client_max_body_size 50M;

    location ~ ^/(assets/|robots.txt|humans.txt|favicon.ico) {
        expires max;
    }

    location /ws {
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "Upgrade";
        proxy_set_header CLIENT_IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_read_timeout 86400;
        proxy_pass http://10.10.10.30:6042;
    }

    location / {
        proxy_set_header Host $http_host;
        proxy_set_header CLIENT_IP $remote_addr;
       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_read_timeout 300;
        proxy_pass http://10.10.10.30:3000;

    }
    ssl_certificate /etc/letsencrypt/live/support.domain.com/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/support.domain.com/privkey.pem; # managed by Certbot
}