server { if ($host = git.firefrostgaming.com) { return 301 https://$host$request_uri; } # managed by Certbot listen 74.63.218.202:80; server_name git.firefrostgaming.com; return 301 https://$host$request_uri; } server { listen 74.63.218.202:443 ssl http2; server_name git.firefrostgaming.com; client_max_body_size 512M; # Temporary self-signed cert (will be replaced by Let's Encrypt) ssl_certificate /etc/letsencrypt/live/git.firefrostgaming.com/fullchain.pem; # managed by Certbot ssl_certificate_key /etc/letsencrypt/live/git.firefrostgaming.com/privkey.pem; # managed by Certbot location / { proxy_pass http://127.0.0.1:3000; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; } }