X-Git-Url: http://git.purplebirdman.com/proxy.git/blobdiff_plain/cd1d785ab31607060b8c2021e512ff4bc33bdf9c..505752c7f0dddd7991dfc4717db8a870aaeef6fe:/proxy/nginx.conf

diff --git a/proxy/nginx.conf b/proxy/nginx.conf
index 2698a6e..73ba402 100644
--- a/proxy/nginx.conf
+++ b/proxy/nginx.conf
@@ -1,13 +1,36 @@
-worker_processes 1;
+worker_processes auto;
 
 events {
     worker_connections 1024;
 }
 
 http {
+    ssl_password_file /etc/ssl/certs/passphrase.txt;
+
+    server {
+        listen               443 ssl;
+        server_name          go.purplebirdman.com;
+        ssl_certificate      /etc/ssl/certs/cert.pem;
+        ssl_certificate_key  /etc/ssl/certs/key.pem;
+        location / {
+            proxy_pass http://go-web;
+            proxy_set_header Host $host;
+        }
+        location /ws {
+            proxy_pass http://go-web;
+            proxy_set_header Host $host;
+
+            # websocket magic
+            proxy_http_version 1.1;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection "Upgrade";
+        }
+    }
     server {
-        listen               80 default_server;
+        listen               443 ssl;
         server_name          kanban.purplebirdman.com;
+        ssl_certificate      /etc/ssl/certs/cert.pem;
+        ssl_certificate_key  /etc/ssl/certs/key.pem;
         client_max_body_size 20M;
         location / {
             proxy_pass http://kanboard;
@@ -15,10 +38,23 @@ http {
         }
     }
     server {
-        server_name public.purplebirdman.com;
+        listen               443 ssl;
+        server_name          public.purplebirdman.com;
+        ssl_certificate      /etc/ssl/certs/cert.pem;
+        ssl_certificate_key  /etc/ssl/certs/key.pem;
         location / {
             proxy_pass http://public;
             proxy_set_header Host $host;
         }
     }
+    server {
+        listen               443 ssl;
+        server_name          purplebirdman.com;
+        ssl_certificate      /etc/ssl/certs/cert.pem;
+        ssl_certificate_key  /etc/ssl/certs/key.pem;
+        location / {
+            proxy_pass http://purplebirdman;
+            proxy_set_header Host $host;
+        }
+    }
 }