devops-demo/Section_07/reverse_proxy_ssl

35 lines
1.1 KiB
Plaintext

server {
listen 80;
listen [::]:80;
server_name demo-devops-api.konnect.dev;
location / {
return 301 https://$host$request_uri;
}
}
server {
listen 443 ssl http2;
server_name demo-devops-api.konnect.dev;
location / {
proxy_pass http://127.0.0.1:5000;
proxy_set_header Host $http_host;
proxy_set_header X-Forwarded-Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Forwarded-Port 443;
proxy_buffer_size 128k;
proxy_buffers 4 256k;
proxy_busy_buffers_size 256k;
}
access_log /var/log/nginx/reverse_proxy_nginx.log;
error_log /var/log/nginx/reverse_proxy_nginx.log;
ssl_certificate /etc/letsencrypt/live/demo-devops-api.konnect.dev/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/demo-devops-api.konnect.dev/privkey.pem;
}