server { listen 80; server_name _; # Catch all, see http://nginx.org/en/docs/http/server_names.html location /.well-known/acme-challenge/ { root /var/www/certbot; } location / { return 301 https://$host$request_uri; } } server { listen 443 ssl default_server; listen [::]:443 ssl default_server; server_name _; # Catch all set $static_path /var/www/sharelatex/web/public; ssl_certificate /etc/letsencrypt/certs/domain/fullchain.pem; ssl_certificate_key /etc/letsencrypt/certs/domain/privkey.pem; include /etc/nginx/options-ssl-nginx.conf; ssl_dhparam /etc/nginx/ssl-dhparams.pem; location /.well-known/acme-challenge/ { root /var/www/certbot; } location / { proxy_pass http://127.0.0.1:3000; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; proxy_set_header X-Forwarded-Host $host; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_read_timeout 3m; proxy_send_timeout 3m; } location /socket.io { proxy_pass http://127.0.0.1:3026; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; proxy_set_header X-Forwarded-Host $host; proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_read_timeout 3m; proxy_send_timeout 3m; } location /stylesheets { expires 1y; root $static_path/; } location /minjs { expires 1y; root $static_path/; } location /img { expires 1y; root $static_path/; } }