server {
    listen 8443 ssl default_server;
    server_name _;

    ssl_certificate     /etc/nginx/certs/repo-server.crt.pem;
    ssl_certificate_key /etc/nginx/certs/repo-server.key.pem;

    root /srv;
    autoindex off;

    # The package metadata document bakes in a __BASE_URL__ placeholder for
    # its tarball URL, since the host:port this fixture is actually reached
    # on is only known once tox-docker starts the container, not at
    # image-build time. $http_host reflects exactly what the client (npm)
    # used to connect, e.g. host.docker.internal:55123.
    location = /idconfiguratortestpkg {
        default_type application/json;
        sub_filter '__BASE_URL__' 'https://$http_host';
        sub_filter_once off;
        sub_filter_types application/json;
    }
}