nginx.conf

user                      nginx;
worker_processes          {{ worker_procs || 1 }};
 
error_log                 /var/log/nginx/error.log;
pid                       /var/run/nginx.pid;

events {
  # max_clients = worker_processes * worker_connections / 4
  worker_connections      {{ worker_conns || 1024 }};
}

http {
  include                 mime.types;
  default_type            application/octet-stream;
  sendfile                on;

  gzip                    {%if gzip == "0" %}off{% else %}on{% endif %};
  gzip_comp_level         6;
  gzip_vary               on;
  gzip_min_length         1000;
  gzip_proxied            any;
  gzip_types              text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript;
  gzip_buffers            16 8k;

  upstream nodes {
  {% for p in split(ports,",") %}  server                127.0.0.1:{{ p.value }};
  {% endfor %}
    keepalive             64;
  }

  server {
    listen                80;
{% if ssl == "1" %}
    server_name           gist.sh;
    rewrite               ^ https://$server_name$request_uri? permanent;
  }

  server {
    listen                443 ssl;
    ssl_certificate       {{ ssl_cert }};
    ssl_certificate_key   {{ ssl_cert_key }};
    ssl_protocols         SSLv3 TLSv1;
    ssl_ciphers           HIGH:!aNULL:!MD5;
{% endif %}
    server_name           gist.sh;

    # settings for static assets
    location ~ ^/(robots.txt|humans.txt|favicon.ico) {
      root                /usr/share/nginx/html;
      access_log          off;
      expires             max;
    }

    # proxy settings for backend node apps
    location / {
      proxy_pass          http://nodes;

      proxy_redirect      off;
      proxy_set_header    X-Real-IP $remote_addr;
      proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header    X-Forwarded-Proto $scheme;
      proxy_set_header    Host $host;
      proxy_set_header    X-NginX-Proxy true;
      proxy_set_header    Connection "";
      proxy_http_version  1.1;
    }
  }
}