prod 1.2 KB

12345678910111213141516171819202122232425262728293031323334353637383940
  1. server {
  2. client_max_body_size 4g;
  3. server_tokens off;
  4. server_name gitote.example.com;
  5. proxy_set_header X-Real-IP $remote_addr; # pass on real client IP
  6. location / {
  7. proxy_pass http://localhost:8080;
  8. proxy_set_header X-Real-IP $remote_addr;
  9. proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  10. proxy_set_header Host $http_host;
  11. proxy_set_header X-NginX-Proxy true;
  12. }
  13. location /heartbeat {
  14. default_type text/plain;
  15. return 200 "Heartbeat";
  16. }
  17. listen 443 ssl; # managed by Certbot
  18. ssl_certificate /etc/certs/fullchain.pem;
  19. ssl_certificate_key /etc/certs/privkey.pem;
  20. #ssl_certificate /etc/letsencrypt/live/gitote.example.com/fullchain.pem; # managed by Certbot
  21. #ssl_certificate_key /etc/letsencrypt/live/gitote.example.com/privkey.pem; # managed by Certbot
  22. #include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
  23. #ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot
  24. }
  25. server {
  26. if ($host = gitote.example.com) {
  27. return 301 https://$host$request_uri;
  28. } # managed by Certbot
  29. server_name gitote.example.com;
  30. listen 80;
  31. return 404; # managed by Certbot
  32. }