http.nginx.conf

worker_processes 1;

events { worker_connections 1024; }

http {

    sendfile on;

    map $http_upgrade $connection_upgrade {
        default upgrade;
        '' close;
   }

    upstream web {
        server localhost:3000;
    }

    upstream api {
        server localhost:8000;
    }

    # http://domain.com
    server {
        listen 80;
        server_name domain.com;

        # for certbot challenges (renewal process)
        location ~ /.well-known/acme-challenge {
            allow all;
            root /usr/share/nginx/html;
        }

        location / {
            proxy_pass                 http://web;
            proxy_pass_header          Set-Cookie;
            proxy_connect_timeout      159s;
            proxy_send_timeout         600;
            proxy_read_timeout         600;
            proxy_buffer_size          64k;
            proxy_buffers              16 32k;
            proxy_busy_buffers_size    64k;
            proxy_temp_file_write_size 64k;
            proxy_hide_header          Vary;
            proxy_ignore_headers       Cache-Control Expires;
            proxy_set_header           Host $http_host;
            proxy_set_header           Accept-Encoding '';
            proxy_set_header           Referer $http_referer;
            proxy_set_header           Cookie $http_cookie;
            proxy_set_header           X-Real-IP $remote_addr;
            proxy_set_header           X-Forwarded-Server $host;
            proxy_set_header           X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header           X-Forwarded-Host $server_name;
            proxy_set_header           X-Scheme $scheme;
        }
    }

    # http://api.domain.com
    server {
        listen 80;
        server_name api.domain.com;

        # for certbot challenges (renewal process)
        location ~ /.well-known/acme-challenge {
            allow all;
            root /usr/share/nginx/html;
        }

        location / {
            proxy_pass                 http://api;
            proxy_pass_header          Set-Cookie;
            proxy_connect_timeout      159s;
            proxy_send_timeout         600;
            proxy_read_timeout         600;
            proxy_buffer_size          64k;
            proxy_buffers              16 32k;
            proxy_busy_buffers_size    64k;
            proxy_temp_file_write_size 64k;
            proxy_hide_header          Vary;
            proxy_ignore_headers       Cache-Control Expires;
            proxy_set_header           Accept-Encoding '';
            proxy_set_header           Referer $http_referer;
            proxy_set_header           Cookie $http_cookie;
            proxy_set_header           X-Real-IP $remote_addr;
            proxy_set_header           X-Forwarded-Server $host;
            proxy_set_header           X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header           X-Forwarded-Host $server_name;
            proxy_set_header           X-Scheme $scheme;
       }
    }
}