server {
    listen 80;
    listen [::]:80;

    server_name $HOST_PMA;
    return 301 https://$HOST_PMA${DOLAR}request_uri;
}

server {
    listen 443 ssl;
    listen [::]:443;

    server_name $HOST_PMA;

    ssl_certificate /etc/nginx/certs/fullchain.pem;
    ssl_certificate_key /etc/nginx/certs/privkey.pem;

    location / {
            allow $IK_SUBRED;
            deny all;
            proxy_pass http://pma;
            proxy_set_header X-Forwarded-For ${DOLAR}proxy_add_x_forwarded_for;
            proxy_set_header Host ${DOLAR}http_host;
            proxy_redirect default;
    }
}