server { if ($host = www.git.asxp.io) { return 301 https://$host$request_uri; } # managed by Certbot if ($host = git.asxp.io) { return 301 https://$host$request_uri; } # managed by Certbot listen 80; server_name www.git.asxp.io git.asxp.io; listen [::]:80; server_name www.git.asxp.io git.asxp.io; server_name _; return 444; location / { proxy_pass http://localhost:3000; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; } } server { listen 443 ssl http2; listen [::]:443 ssl http2; server_name git.asxp.io; ssl_certificate /etc/letsencrypt/live/asxp.io/fullchain.pem; # managed by Certbot ssl_certificate_key /etc/letsencrypt/live/asxp.io/privkey.pem; # managed by Certbot location / { proxy_pass http://localhost:3000; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; } }