nginx-ssl.conf

#                 r
#                ain
#                rai
#               nrain
#              rainrai
#             nrainrain
#            ainrainrain
#           rainrainrainr
#          ainrainrainrain
#         rainrainrainrainr
#       ainrainrainrainrainra
#     inra nrainrainrainrainrai
#   nrain  inrainrainrainrainrain
#  rain   nrainrainrainrainrainrai
# nrai   inrainrainrainrainrainrain
# rai   inrainrainrainrainrainrainr
# rain   nrainrainrainrainrainrainr
#  rainr  nrainrainrainrainrainrai
#   nrain ainrainrainrainrainrain
#     rainrainrainrainrainrainr
#       rainranirainrainrainr
#            ainrainrain
include /etc/nginx/main.d/*.conf;

user nginx;
worker_processes auto;

error_log  /var/log/nginx/error.log warn;
pid        /var/run/nginx.pid;


events {
    worker_connections 1024;
    # multi_accept on;
}

http {

    ##
    # Basic Settings
    ##

    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;
    keepalive_timeout 65;
    types_hash_max_size 2048;


    include /etc/nginx/mime.types;
    default_type application/octet-stream;

    ##
    # SSL Settings
    ##

    ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; # Dropping SSLv3, ref: POODLE
    ssl_prefer_server_ciphers on;

    ##
    # Logging Settings
    ##

    access_log /var/log/nginx/access.log;
    error_log /var/log/nginx/error.log;

    ##
    # Gzip Settings
    ##

    brotli on;
    brotli_static on;
    brotli_comp_level 6;
    brotli_types text/css text/javascript application/javascript text/xml application/xml image/svg+xml application/json;


    include /etc/nginx/conf.d/*.conf;
    include /usr/share/nginx/modules/*.conf;

    upstream go_server {
        server 95.84.192.140:8000;
    }

    upstream chat_server {
         server 95.84.192.140:8001;
    }

    upstream auth_server {
        server 95.84.192.140:8002;
    }

    server {
        listen 80;
        return 301 https://drip.monkeys.team;
    }

    server {
        listen                                        443 ssl http2;
        server_name                               drip.monkeys.team;
        ssl_certificate                       star.monkeys.team.crt;
        ssl_certificate_key                   star.monkeys.team.key;
        ssl_protocols                         TLSv1 TLSv1.1 TLSv1.2;
        ssl_ciphers                                HIGH:!aNULL:!MD5;
        access_log                   /var/log/nginx/Drip.access.log;
        error_log                     /var/log/nginx/Drip.error.log;

        ssl on;

        client_max_body_size 20M;

        location /api/v1/apiws {
            proxy_pass https://chat_server;
            proxy_set_header Host $host;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_http_version 1.1;
            proxy_read_timeout 2h;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection "upgrade";
        }
        location /api/v1/notifications {
            proxy_pass https://go_server;
            proxy_set_header Host $host;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_http_version 1.1;
            proxy_read_timeout 6h;
            proxy_set_header Upgrade $http_upgrade;
            proxy_set_header Connection "upgrade";
        }


        location /api/v1/chats {
            proxy_pass https://chat_server;
            proxy_set_header Host $host;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }
        location /api/v1/chat {
            proxy_pass https://chat_server;
            proxy_set_header Host $host;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }
        location /api/v1/auth {
            proxy_pass https://auth_server;
            proxy_set_header Host $host;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }
        location /api/v1/ {
            proxy_pass https://go_server;
            proxy_set_header Host $host;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        }

        location /media/ {
            proxy_pass https://go_server;
            proxy_set_header Host $host;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            add_header Cache-Control max-age=31536000;
        }

        location / {
            root /usr/share/nginx/html/;
            add_header Service-Worker-Allowed /;
            index index.html;
            add_header Cache-Control max-age=0;
            autoindex on;
            autoindex_exact_size on;
            set $fallback_file /index.html;
            if ($http_accept !~ text/html) {
                set $fallback_file /null;
            }
            if ($uri ~ /$) {
                set $fallback_file /null;
            }
            try_files $uri $fallback_file;
        }

        location /status {
            access_log off;
            default_type text/plain;
            add_header Content-Type text/plain;
            return 200 "alive";
        }

        sendfile on;
    }
}