server {
listen 80;
rewrite ^(.*) https://$host$1 permanent;
}
server {
listen 443 ssl;
listen [::]:443 ssl;
ssl_certificate /etc/ssl/certs/example_com.crt;
ssl_certificate_key /etc/ssl/private/example_com.key;
ssl_session_cache shared:SSL:1m;
ssl_session_timeout 15m;
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;
access_log /srv/www/bar/shared/log/nginx-access.log;
error_log /srv/www/bar/shared/log/nginx-error.log;
location ~ ^/bar(/.*|$) {
alias /srv/www/bar/current/public$1;
passenger_base_uri /bar;
passenger_app_root /srv/www/bar/current;
passenger_document_root /srv/www/bar/current/public;
passenger_enabled on;
}
location ~ ^/bar/assets/ {
expires 1y;
add_header Cache-Control public;
add_header ETag "";
break;
}
# Just some env var setting
include /etc/nginx/conf.d/bar/env.conf;
}