chore: update nginx.conf for production

Author: A7Lavinraj

nginx/nginx.conf

@@ -20,21 +20,61 @@ http {
   }
 
   server {
-    listen 443 ssl;
+    listen 443 ssl http2;
 
-    http2 on;
+    server_name motionflex.in;
 
     ssl_certificate /etc/letsencrypt/live/motionflex.in/fullchain.pem;
     ssl_certificate_key /etc/letsencrypt/live/motionflex.in/privkey.pem;
 
-    server_name motionflex.in;
-
-    root  /var/www/html;
-
+    root /var/www/html;
     index index.php index.html index.htm;
 
     location / {
       proxy_pass http://web:4173;
+      proxy_set_header Host $host;
+      proxy_set_header X-Real-IP $remote_addr;
+      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+      proxy_set_header X-Forwarded-Proto $scheme;
+    }
+
+    location ~ /.well-known/acme-challenge/ {
+      root /var/www/certbot;
+    }
+  }
+
+  server {
+    listen 80;
+    server_name api.motionflex.in;
+
+    location / {
+      proxy_pass http://localhost:3000;
+      proxy_set_header Host $host;
+      proxy_set_header X-Real-IP $remote_addr;
+      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+      proxy_set_header X-Forwarded-Proto $scheme;
+    }
+
+    location ~ /.well-known/acme-challenge/ {
+      root /var/www/certbot;
+    }
+
+    return 301 https://$host$request_uri;
+  }
+
+  server {
+    listen 443 ssl http2;
+    server_name api.motionflex.in;
+
+    ssl_certificate /etc/letsencrypt/live/motionflex.in/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/motionflex.in/privkey.pem;
+
+    location / {
+      proxy_pass http://localhost:3000;
+      proxy_set_header Host $host;
+      proxy_set_header X-Real-IP $remote_addr;
+      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+      proxy_set_header X-Forwarded-Proto $scheme;
     }
 
     location ~ /.well-known/acme-challenge/ {