server {
  listen 6667 ssl;
  listen [::]:6667 ssl;

  include snippets/ssl_tcp;

  proxy_pass znc:6667;
}