server {
    # NOTE:
    # - urgently consider configuring TLS instead
    # - maybe keep a forwarder from HTTP to HTTPS
    listen 80;

    # NOTE:
    # - Comment out this line if you have no IPv6
    listen [::]:80;

    # NOTE:
    # - replace with your actual server name
    server_name localhost;

    access_log /var/log/nginx/merchant.log;
    error_log /var/log/nginx/merchant.err;
    location /taler-merchant/ {
         proxy_pass http://unix:/var/run/taler/merchant-httpd/merchant-http.sock;
         proxy_redirect off;
         proxy_set_header Host $host;

         # NOTE:
         # - put your actual DNS name here
         proxy_set_header X-Forwarded-Host "localhost";

         # NOTE:
         # - uncomment the following line if you are using HTTPS
         # proxy_set_header X-Forwarded-Proto "https";
    }

}