1
server {
2
    listen 80;
3
    server_name example.com;
4
    root /opt/app/dist;
5
    index index.html;
6

7
    location / {
8
        try_files $uri $uri/ /index.html;
9
    }
10

11
    location /api/ {
12
        proxy_set_header Host $http_host;
13
        proxy_set_header X-Real-IP $remote_addr;
14
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
15
        proxy_set_header X-Forwarded-Proto $scheme;
16
        proxy_pass http://127.0.0.1:8080/;
17
    }
18
}

1
server {
2
    listen 80;
3
    server_name example.com;
4
    return 301 https://$host$request_uri;
5
}
6

7
server {
8
    listen 443 ssl http2;
9
    server_name example.com;
10

11
    ssl_certificate     /opt/cert/example.com.pem;
12
    ssl_certificate_key /opt/cert/example.com.key;
13
    ssl_protocols       TLSv1.2 TLSv1.3;
14
    ssl_ciphers         EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:!MD5;
15
    ssl_prefer_server_ciphers on;
16
    ssl_session_cache   shared:SSL:10m;
17
    ssl_session_timeout 10m;
18
    add_header Strict-Transport-Security "max-age=31536000" always;
19

20
    root /opt/app/dist;
21
    index index.html;
22

23
    location / {
24
        try_files $uri $uri/ /index.html;
25
    }
26

27
    location /api/ {
28
        proxy_set_header Host $http_host;
29
        proxy_set_header X-Real-IP $remote_addr;
30
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
31
        proxy_set_header X-Forwarded-Proto $scheme;
32
        proxy_pass http://127.0.0.1:8080/;
33
    }
34
}

1
server {
2
    listen 80;
3
    server_name app.example.com;
4

5
    location / {
6
        proxy_set_header Host $http_host;
7
        proxy_set_header X-Real-IP $remote_addr;
8
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
9
        proxy_set_header X-Forwarded-Proto $scheme;
10
        proxy_connect_timeout 60s;
11
        proxy_send_timeout    600s;
12
        proxy_read_timeout    600s;
13
        proxy_pass http://127.0.0.1:3000;
14
    }
15
}

1
map $http_upgrade $connection_upgrade {
2
    default upgrade;
3
    ''      close;
4
}
5

6
server {
7
    listen 80;
8
    server_name ws.example.com;
9

10
    location / {
11
        proxy_set_header Host $http_host;
12
        proxy_set_header X-Real-IP $remote_addr;
13
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
14
        proxy_set_header X-Forwarded-Proto $scheme;
15
        proxy_http_version 1.1;
16
        proxy_set_header Upgrade $http_upgrade;
17
        proxy_set_header Connection $connection_upgrade;
18
        proxy_connect_timeout 60s;
19
        proxy_read_timeout    3600s;
20
        proxy_pass http://127.0.0.1:3001;
21
    }
22
}

1
server {
2
    listen 9000;
3
    server_name minio.example.com;
4
    client_max_body_size 0;
5

6
    location / {
7
        proxy_set_header Host $http_host;
8
        proxy_set_header X-Real-IP $remote_addr;
9
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
10
        proxy_pass http://127.0.0.1:9001;
11
    }
12
}

1
stream {
2
    server {
3
        listen 13306;
4
        proxy_connect_timeout 1s;
5
        proxy_timeout 300s;
6
        proxy_pass 192.168.1.20:3306;
7
    }
8
}
9

10
http {
11
    # ...
12
}