blob: af2e9e4ab01a23af76dda66a019f419916b9fd24 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
|
upstream alaveteli {
server 127.0.0.1:3000;
}
# Redirect any http:// request to https://www.example.com
server {
listen 80;
server_name www.example.com;
rewrite ^(.*) https://www.example.com$request_uri permanent;
}
server {
listen 443;
server_name www.example.com;
root /var/www/alaveteli/alaveteli/public;
server_tokens off;
try_files $uri/index.html $uri @alaveteli;
access_log /var/log/nginx/alaveteli_ssl_access.log;
error_log /var/log/nginx/alaveteli_ssl_error.log error;
location /download {
internal;
alias /var/www/alaveteli/alaveteli/cache/zips/production/download;
}
ssl on;
ssl_certificate /etc/ssl/certs/www.example.com.cert;
ssl_certificate_key /etc/ssl/private/www.example.com.key;
ssl_ciphers ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH:!AESGCM;
location @alaveteli {
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Sendfile-Type X-Accel-Redirect;
proxy_set_header X-Accel-Mapping /var/www/alaveteli/alaveteli/cache/zips/production/download=/download;
proxy_redirect off;
proxy_pass http://alaveteli;
}
}
|
