nginx.conf

server {                                                                     
  server_name <%= "#{site_hostname} #{site_aliases}" %>;
  listen 80 default;

  location / {
    proxy_pass         http://<%= find_servers(:roles => :app).first %>;
  }

  proxy_buffering     on;
  proxy_redirect      off;
  proxy_set_header    Host                  $host;
  proxy_set_header    X-Real-IP             $remote_addr;
  proxy_set_header    X-Forwarded-For       $proxy_add_x_forwarded_for;
}

server {
  server_name <%= "#{site_hostname} #{site_aliases}" %>;
  listen               443 default ssl;

  ssl_certificate      <%= ssl_cert %>;
  ssl_certificate_key  <%= ssl_key %>;

  location / {
    proxy_pass         http://<%= find_servers(:roles => :app).first %>;
  }

  proxy_buffering     on;
  proxy_redirect      off;
  proxy_set_header    Host                  $host;
  proxy_set_header    X-Real-IP             $remote_addr;
  proxy_set_header    X-Forwarded-For       $proxy_add_x_forwarded_for;
  proxy_set_header    X-Forwarded-Proto     https;
}