Overleaf/ldap-overleaf-sl/nginx/sharelatex.conf

server {
	listen         80;
	server_name    _; # Catch all, see http://nginx.org/en/docs/http/server_names.html
        location /.well-known/acme-challenge/ {
	    root /var/www/certbot;
	}
        location / {
          return 301 https://$host$request_uri;
        }    
}


server {
        
	listen 443 ssl default_server;
        listen [::]:443 ssl default_server;
        server_name    _; # Catch all

	set $static_path /var/www/sharelatex/web/public;
        ssl_certificate /etc/letsencrypt/certs/domain/fullchain.pem;
        ssl_certificate_key /etc/letsencrypt/certs/domain/privkey.pem;
 	include /etc/nginx/options-ssl-nginx.conf;
        ssl_dhparam /etc/nginx/ssl-dhparams.pem;

        location /.well-known/acme-challenge/ {
	    root /var/www/certbot;
	}

	location / {
		proxy_pass http://127.0.0.1:3000;
		proxy_http_version 1.1;
		proxy_set_header Upgrade $http_upgrade;
		proxy_set_header Connection "upgrade";
		proxy_set_header X-Forwarded-Host $host;
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_read_timeout 3m;
		proxy_send_timeout 3m;
	}
	
	location /socket.io {
		proxy_pass http://127.0.0.1:3026;
		proxy_http_version 1.1;
		proxy_set_header Upgrade $http_upgrade;
		proxy_set_header Connection "upgrade";
		proxy_set_header X-Forwarded-Host $host;
		proxy_set_header X-Forwarded-Proto $scheme;
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_read_timeout 3m;
		proxy_send_timeout 3m;
	}

	location /stylesheets {
		expires 1y;
		root $static_path/;
	}

	location /minjs {
		expires 1y;
		root $static_path/;
	}

	location /img {
		expires 1y;
		root $static_path/;
	}
}