example-nginx-proxy.conf

# Nginx reverse proxy for Telegram Bot API
# Useful in countries where api.telegram.org is blocked.
#
# Usage:
#   1. Place this config on a server that can reach api.telegram.org
#   2. Set TELEGRAM_API_BASE_URL=https://your-server.com in .env
#
# Note: Consider adding IP allowlisting (see commented example below)
# to prevent unauthorized use of your proxy.

server {
    listen 443 ssl;
    server_name your-server.com;

    ssl_certificate     /etc/ssl/certs/your-server.com.pem;
    ssl_certificate_key /etc/ssl/private/your-server.com.key;
    ssl_protocols       TLSv1.2 TLSv1.3;

    # Required so nginx re-resolves api.telegram.org if its IP changes
    resolver 1.1.1.1 8.8.8.8 valid=30s ipv6=off;

    location / {
        proxy_pass https://api.telegram.org;
        proxy_set_header Host api.telegram.org;
        proxy_ssl_server_name on;
        proxy_http_version 1.1;
        proxy_set_header Connection "";
    }
}