nginx-node-ssl-letsencrypt-template

server {
	listen [::]:443 ssl;
	listen 443 ssl;
	server_name {{ domain }};

	ssl_certificate /etc/letsencrypt/live/{{ domain }}/fullchain.pem;
	ssl_certificate_key /etc/letsencrypt/live/{{ domain }}/privkey.pem;
	include /etc/letsencrypt/options-ssl-nginx.conf;
	ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;

	client_max_body_size 10M;

	access_log /var/log/nginx/{{ domain }}.access.log;
	error_log /var/log/nginx/{{ domain }}.error.log;

	location / {
		proxy_set_header Host $http_host;
		proxy_set_header X-Real-IP $remote_addr;
		proxy_set_header X-Forwarded-Host $http_host;
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_set_header X-Forwarded-Proto $scheme;

		proxy_pass http://localhost:{{ service_port }}/;
	}
	
	location /.well-known/ {
		root {{ webroot }};
	}
}

# HTTP redirect

server {
	listen 80;
	listen [::]:80;
	server_name {{ domain }};

	return 301 https://{{ domain }}$request_uri;
}