nginx.ssl.conf.template

upstream websocket { server $(docker inspect -f '{{.NetworkSettings.IPAddress}}' $(cat $DOKKU_ROOT/$APP/CONTAINER.socket.1 2> /dev/null)):9200; }

server {
  listen      [::]:80;
  listen      80;
  server_name $SSL_SERVER_NAME;
  return 301 https://$SSL_SERVER_NAME\$request_uri;
}

server {
  listen      [::]:443 ssl spdy;
  listen      443 ssl spdy;
  server_name $SSL_SERVER_NAME;
$SSL_DIRECTIVES

  keepalive_timeout   70;
  add_header          Alternate-Protocol  443:npn-spdy/2;
  location    / {
    proxy_pass  http://$APP;
    proxy_http_version 1.1;
    proxy_set_header Upgrade \$http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_set_header Host \$http_host;
    proxy_set_header X-Forwarded-Proto \$scheme;
    proxy_set_header X-Forwarded-For \$remote_addr;
    proxy_set_header X-Forwarded-Port \$server_port;
    proxy_set_header X-Request-Start \$msec;
  }
  location /websocket {
    proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
    proxy_set_header Host \$http_host;
    proxy_redirect off;
    proxy_set_header X-Forwarded-Proto https;
    proxy_http_version 1.1;
    proxy_set_header Upgrade \$http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_pass http://websocket;
  }
  include $DOKKU_ROOT/$APP/nginx.conf.d/*.conf;
}