diff --git a/adguard.subdomain.conf.sample b/adguard.subdomain.conf.sample
index adbc3c9..9816eea 100644
--- a/adguard.subdomain.conf.sample
+++ b/adguard.subdomain.conf.sample
@@ -21,6 +21,10 @@ server {
     # enable for Authentik (requires authentik-location.conf in the location block)
     #include /config/nginx/authentik-server.conf;
 
+    set $upstream_app adguard;
+    set $upstream_port 80;
+    set $upstream_proto http;
+
     location / {
         # enable the next two lines for http auth
         #auth_basic "Restricted";
@@ -37,9 +41,6 @@ server {
 
         include /config/nginx/proxy.conf;
         include /config/nginx/resolver.conf;
-        set $upstream_app adguard;
-        set $upstream_port 80;
-        set $upstream_proto http;
         proxy_pass $upstream_proto://$upstream_app:$upstream_port;
 
     }
@@ -47,9 +48,6 @@ server {
     location /control {
         include /config/nginx/proxy.conf;
         include /config/nginx/resolver.conf;
-        set $upstream_app adguard;
-        set $upstream_port 80;
-        set $upstream_proto http;
         proxy_pass $upstream_proto://$upstream_app:$upstream_port;
 
     }
@@ -59,9 +57,6 @@ server {
         # see https://github.com/AdguardTeam/AdGuardHome/wiki/Configuration#configuration-file
         include /config/nginx/proxy.conf;
         include /config/nginx/resolver.conf;
-        set $upstream_app adguard;
-        set $upstream_port 80;
-        set $upstream_proto http;
         proxy_pass $upstream_proto://$upstream_app:$upstream_port;
 
     }