server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    server_name offsite-ejbca.mracs.dev;

    location / {
        allow 63.141.252.133;
        deny all;
        proxy_pass http://localhost:7562;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
    }

}