Configure nginx to act like a proxy server that will always forward the requests to the application on port 80
server {
listen 80;
server_name {{ server_names }};
location / {
proxy_set_header Host $host ;
proxy_set_header X-Real-IP $remote_addr;
#proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto: http;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
#resolver 8.8.8.8;
#client_max_body_size 100M;
proxy_pass http://{{ server_ip }}:80;
proxy_read_timeout 10;
}
error_log /var/log/nginx/{{ ticket | lower }}.proxy-error.log;
access_log /var/log/nginx/{{ ticket | lower }}.proxy-access.log;
}
server {
#listen
listen 443 ssl;
server_name {{ server_names }};
#ssl_session_cache builtin:1000 shared:SSL:10m;
#ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
#ssl_ciphers HIGH:!aNULL:!eNULL:!EXPORT:!CAMELLIA:!DES:!MD5:!PSK:!RC4;
#ssl_prefer_server_ciphers on;
ssl_certificate /etc/letsencrypt/live/<domain_name>/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/<domain_name>/privkey.pem;
include /etc/letsencrypt/options-ssl-nginx.conf;
ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
location / {
proxy_set_header Host $host ;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto: https;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
#resolver 8.8.8.8;
#client_max_body_size 100M;
proxy_pass http://{{ server_ip }}:80;
proxy_read_timeout 10;
}
error_log /var/log/nginx/{{ ticket | lower }}-ssl.proxy-error.log;
access_log /var/log/nginx/{{ ticket | lower }}-ssl.proxy-access.log;
}