gistfile1.txt

# GITLAB
# Maintainer: @randx
# App Version: 2.9

upstream gitlab {
  server unix:/home/gitlab/gitlab/tmp/sockets/gitlab.socket;
}

server {
  listen  192.168.x.x:80;
  server_name your.server.name.com;
  root /nowhere;
  rewrite ^ https://your.server.name.com$request_uri permanent;
}

server {
  listen   192.168.x.x:443;        # e.g., listen 192.168.1.1:80;
  server_name 	your.server.name.com;     # e.g., server_name source.example.com;
  root /home/gitlab/gitlab/public;

  ssl			on;
  ssl_certificate	/etc/ssl/certs/ssl-cert.crt;
  ssl_certificate_key	/etc/ssl/private/ssl-cert.key;
 
  ssl_session_timeout  5m;
  ssl_protocols  SSLv2 SSLv3 TLSv1;
  ssl_ciphers  HIGH:!aNULL:!MD5;
  ssl_prefer_server_ciphers   on;
  # individual nginx logs for this gitlab vhost
  access_log  /var/log/nginx/gitlab_access.log;
  error_log   /var/log/nginx/gitlab_error.log;

  location / {
    # serve static files from defined root folder;.
    # @gitlab is a named location for the upstream fallback, see below
    try_files $uri $uri/index.html $uri.html @gitlab;
  }

  # if a file, which is not found in the root folder is requested,
  # then the proxy pass the request to the upsteam (gitlab unicorn)
  location @gitlab {
    proxy_redirect     off;
    proxy_set_header   X-Forwarded-Proto $scheme;
    proxy_set_header   Host              $http_host;
    proxy_set_header   X-Real-IP         $remote_addr;
    proxy_set_header   X-Forwarded-For   $proxy_add_x_forwarded_for;
    proxy_pass http://gitlab;
  }
}