server {
    # listen 443 ssl http2;
    # listen [::]:443 ssl http2;
    #
    # server_name whatever.tld;

    # index.html stored in /srv/http/whatever.tld/secret-santa/index.html
    location /secret-santa { root /srv/http/whatever.tld; }
    # app running on localhost with the port hardcoded in main.rs
    location /secret-santa-api/ { proxy_pass http://localhost:3067/secret-santa-api; }

    # SSL config...
}