diff --git a/nginx.conf b/nginx.conf new file mode 100644 index 0000000..e3e83ab --- /dev/null +++ b/nginx.conf @@ -0,0 +1,65 @@ +proxy_http_version 1.1; + +# http://nginx.org/en/docs/http/websocket.html +map $http_upgrade $connection_upgrade { + default upgrade; + '' close; +} + +upstream lt-server { + server 127.0.0.1:8000; +} + +server { + listen 80 default_server; + listen [::]:80 default_server ipv6only=on; + + server_name .localtunnel.me; + + location / { + proxy_pass http://lt-server/; + + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header Host $http_host; + proxy_set_header X-Forwarded-Proto http; + proxy_set_header X-NginX-Proxy true; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection $connection_upgrade; + + proxy_redirect off; + } +} + +server { + listen 443 default_server ssl spdy; + listen [::]:443 default_server ipv6only=on; + + server_name .localtuunel.me; + + ssl on; + + ssl_certificate ...; + ssl_certificate_key ...; + + ssl_protocols SSLv3 TLSv1 TLSv1.1 TLSv1.2; + ssl_ciphers RC4:HIGH:!aNULL:!MD5; + ssl_prefer_server_ciphers on; + + ssl_session_cache shared:SSL:10m; + ssl_session_timeout 10m; + + location / { + proxy_pass http://lt-server/; + + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header Host $http_host; + proxy_set_header X-Forwarded-Proto https; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header X-NginX-Proxy true; + proxy_set_header Connection $connection_upgrade; + + proxy_redirect off; + } +}