The new proxy reduces latency, simplifies configuration and routing paths, and enables better metrics.
Signing into the machine is another article/conversation.
Once signed in as root, navigate to /root and you will see a Makefile with the following commands:
These commands make edit, make test, and make apply will open up vim, check for a valid configuration, and restart the web server, respectfully.
Note: hot reload is not configured at the moment. When applying your configuration you will disrupt existing connections.
Certbot has been setup on the machine. Run:
certbot certonly --standalone
to get your certificate. The proxy has been setup to allow the specific paths necessary when certbot is running, otherwise connections will be redirected to HTTPS.