Skip to content

Instantly share code, notes, and snippets.

@benedict-erwin

benedict-erwin/legionofevilssl.conf

Forked from octaflop/legionofevilssl.conf
Created September 7, 2019 07:25
Show Gist options
  • Save benedict-erwin/f9839d7a20c91870d53839f9f931e75f to your computer and use it in GitHub Desktop.
Save benedict-erwin/f9839d7a20c91870d53839f9f931e75f to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. @octaflop octaflop revised this gist Feb 19, 2013. 1 changed file with 6 additions and 0 deletions.
    6 changes: 6 additions & 0 deletions legionofevilssl.conf
    View file
    Original file line number Diff line number Diff line change
    @@ -1,3 +1,9 @@
    # The upstream server doesn't need a prefix! no need for wss:// or http:// because nginx will upgrade to http1.1 in the config below
    upstream yeomanserver {
    server localhost:3000;
    }


    server {
    listen 443;
    server_name legionofevil.org;
  2. @octaflop octaflop created this gist Feb 19, 2013.
    29 changes: 29 additions & 0 deletions legionofevilssl.conf
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,29 @@
    server {
    listen 443;
    server_name legionofevil.org;
    root html;
    index index.html index.html;

    access_log /var/log/nginx/access_443.log;
    error_log /var/log/nginx/error_443.log;

    ssl on;
    ssl_certificate /srv/ssl/nginx.pem;
    ssl_certificate_key /srv/ssl/nginx.key;
    ssl_session_cache shared:SSL:10m;
    ssl_session_timeout 5m;

    location / {
    proxy_pass http://yeomanserver;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_set_header Host $host;

    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto https;

    proxy_redirect off;
    }
    }