nginx-exchange.conf.j2 (1440B)
1 {% if regional_currency_nginx_tls_active %} 2 server { 3 listen 80; 4 listen [::]:80; 5 server_name exchange.{{ regional_currency_domain }}; 6 return 308 https://$host$request_uri; 7 } 8 {% endif %} 9 server { 10 listen {{ '443 ssl' if regional_currency_nginx_tls_active else '80' }}; 11 listen [::]:{{ '443 ssl' if regional_currency_nginx_tls_active else '80' }}; 12 server_name exchange.{{ regional_currency_domain }}; 13 {% if regional_currency_nginx_tls_active %} 14 ssl_certificate /etc/letsencrypt/live/backend.{{ regional_currency_domain }}/fullchain.pem; 15 ssl_certificate_key /etc/letsencrypt/live/backend.{{ regional_currency_domain }}/privkey.pem; 16 include /etc/letsencrypt/options-ssl-nginx.conf; 17 ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; 18 {% endif %} 19 proxy_read_timeout 6500s; 20 keepalive_requests 1000000; 21 keepalive_timeout 6500s; 22 23 location / { 24 proxy_pass http://unix:/var/run/taler-exchange/httpd/exchange-http.sock; 25 proxy_set_header Host "exchange.{{ regional_currency_domain }}"; 26 proxy_set_header Forwarded ""; 27 proxy_set_header X-Forwarded-Proto "{{ regional_currency_protocol }}"; 28 proxy_set_header X-Forwarded-Host "exchange.{{ regional_currency_domain }}"; 29 proxy_set_header X-Forwarded-Port "{{ '443' if regional_currency_nginx_tls_active else '80' }}"; 30 proxy_set_header X-Forwarded-Prefix /; 31 proxy_set_header X-Real-IP $remote_addr; 32 proxy_set_header X-Forwarded-For $remote_addr; 33 } 34 }