server { # resolver 127.0.0.11 valid=30s; ## internal docker dns #listen [::]:3011 default ipv6only=on; ## listen for ipv6 listen 80; client_header_timeout 120s; client_body_timeout 120s; client_max_body_size 200m; # save logs here server_name ${SERVER_NAME}; location / { return 301 https://${DOLLAR}host${DOLLAR}request_uri; } } server { # resolver 127.0.0.11 valid=30s; ## internal docker dns #listen [::]:3011 default ipv6only=on; ## listen for ipv6 # listen 444 listen 5000 ssl; # this should allow large docs client_header_timeout 120s; client_body_timeout 120s; client_max_body_size 200m; ssl_certificate /etc/letsencrypt/live/${SERVER_NAME}/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/${SERVER_NAME}/privkey.pem; # save logs here #access_log /var/log/nginx/access.log compression; server_name ${SERVER_NAME}; location / { proxy_pass http://drone-server:8080/; } } server { # resolver 127.0.0.11 valid=30s; ## internal docker dns #listen [::]:3011 default ipv6only=on; ## listen for ipv6 # listen 444 listen 443 ssl; # this should allow large docs client_header_timeout 120s; client_body_timeout 120s; client_max_body_size 200m; ssl_certificate /etc/letsencrypt/live/${SERVER_NAME}/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/${SERVER_NAME}/privkey.pem; # save logs here #access_log /var/log/nginx/access.log compression; server_name ${SERVER_NAME}; location ${LOCATION} { proxy_pass ${PROXY_PASS}; } location ${BLOG_LOCATION} { proxy_set_header Host ${DOLLAR}http_host; proxy_set_header X-Real-IP ${DOLLAR}remote_addr; proxy_set_header X-Forwarded-For ${DOLLAR}proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto ${DOLLAR}scheme; proxy_buffering off; proxy_pass ${BLOG_PROXY_PASS}; } location ${CHAT_LOCATION}sockjs { proxy_pass ${CHAT_PROXY_PASS}/chat/sockjs; proxy_http_version 1.1; proxy_set_header Upgrade ${DOLLAR}http_upgrade; proxy_set_header Connection "Upgrade"; proxy_set_header Host ${DOLLAR}host; proxy_set_header X-Real-IP ${DOLLAR}remote_addr; proxy_set_header X-Forwarded-For ${DOLLAR}proxy_add_x_forwarded_for; proxy_set_header X-Forward-Proto http; proxy_set_header X-Nginx-Proxy true; proxy_redirect off; } location ${CHAT_LOCATION}sockjs/ { proxy_pass ${CHAT_PROXY_PASS}/chat/sockjs/; proxy_http_version 1.1; proxy_set_header Upgrade ${DOLLAR}http_upgrade; proxy_set_header Connection "Upgrade"; proxy_set_header Host ${DOLLAR}host; proxy_set_header X-Real-IP ${DOLLAR}remote_addr; proxy_set_header X-Forwarded-For ${DOLLAR}proxy_add_x_forwarded_for; proxy_set_header X-Forward-Proto http; proxy_set_header X-Nginx-Proxy true; proxy_redirect off; } location ${CHAT_LOCATION} { proxy_pass ${CHAT_PROXY_PASS}; proxy_http_version 1.1; proxy_set_header Upgrade ${DOLLAR}http_upgrade; proxy_set_header Connection "upgrade"; proxy_set_header Host ${DOLLAR}http_host; proxy_set_header X-Real-IP ${DOLLAR}remote_addr; proxy_set_header X-Forwarded-For ${DOLLAR}proxy_add_x_forwarded_for; proxy_set_header X-Forward-Proto http; proxy_set_header X-Nginx-Proxy true; proxy_redirect off; } }