PermitZone Development Nginx Config

nginx.conf

user  WHOAMI admin;
worker_processes  1;

events {
  worker_connections  1024;
}

http {
  include       mime.types;
  default_type  application/octet-stream;

  sendfile        on;
  keepalive_timeout  65;

  upstream app {
    server 127.0.0.1:3000;
  }

  upstream api {
    server 127.0.0.1:3001;
  }

  server {
    listen 80 default_server;
    listen [::]:80 default_server;
    server_name _;
    return 301 https://$host$request_uri;
  }

  server {
    listen       443 ssl;
    server_name  app.permitzone.dev;

    ssl_certificate      ssl/permitzone.dev/permitzone.dev.crt;
    ssl_certificate_key  ssl/permitzone.dev/permitzone.dev.key;

    ssl_session_cache    shared:SSL:1m;
    ssl_session_timeout  5m;

    ssl_ciphers  HIGH:!aNULL:!MD5;
    ssl_prefer_server_ciphers  on;

    location / {
      proxy_pass http://app;
      proxy_http_version 1.1;
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection 'upgrade';
      proxy_set_header Host $host;
      proxy_cache_bypass $http_upgrade;
      chunked_transfer_encoding off;
      proxy_buffering off;
      proxy_cache off;
    }
  }

  server {
    listen       443 ssl;
    server_name  admin.permitzone.dev api.permitzone.dev;

    ssl_certificate      ssl/permitzone.dev/permitzone.dev.crt;
    ssl_certificate_key  ssl/permitzone.dev/permitzone.dev.key;

    ssl_session_cache    shared:SSL:1m;
    ssl_session_timeout  5m;

    ssl_ciphers  HIGH:!aNULL:!MD5;
    ssl_prefer_server_ciphers  on;

    location / {
      proxy_pass http://api;
      proxy_http_version 1.1;
      proxy_set_header Upgrade $http_upgrade;
      proxy_set_header Connection 'upgrade';
      proxy_set_header Host $host;
      proxy_set_header X-Forwarded-Proto https;
      proxy_cache_bypass $http_upgrade;
    }
  }
}