damast.conf

server {
  listen [::]:443 ssl ipv6only=on;
  listen 443 ssl;

  ssl_certificate /etc/ssl/certs/nginx-selfsigned.crt;
  ssl_certificate_key /etc/ssl/private/nginx-selfsigned.key;
  ssl_dhparam /etc/ssl/private/nginx-ssl-dhparams.pem;

  ssl_session_cache shared:le_nginx_SSL:10m;
  ssl_session_timeout 1440m;
  ssl_session_tickets off;

  ssl_protocols TLSv1.2 TLSv1.3;
  ssl_prefer_server_ciphers off;

  ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-SHA";



  location / {
    proxy_pass http://localhost:8000;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Host  $host;
    proxy_set_header X-Forwarded-Port  $server_port;
    proxy_set_header X-Forwarded-Prefix /damast/;
    proxy_set_header X-Forwarded-Proto $scheme;
  }

  # pgAdmin4
  location /pgadmin/ {
    rewrite ^/pgadmin(.*)$ $1 break;

    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Host  $host;
    proxy_set_header X-Forwarded-Port  $server_port;
    proxy_set_header X-Forwarded-Prefix /damast/pgadmin/;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header X-Script-Name /damast/pgadmin;

    proxy_pass http://localhost:5050;
    proxy_redirect off;
  }

  location /testing/pgadmin/ {
    rewrite ^/testing/pgadmin(.*)$ $1 break;

    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Host  $host;
    proxy_set_header X-Forwarded-Port  $server_port;
    proxy_set_header X-Forwarded-Prefix /damast/testing/pgadmin/;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header X-Script-Name /damast/testing/pgadmin;
    
    proxy_pass http://localhost:5050;
    proxy_redirect off;
  }

  # test server
  location /testing/ {
    rewrite ^/testing(.*)$ $1 break;

    proxy_pass http://localhost:8001;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Host  $host;
    proxy_set_header X-Forwarded-Port  $server_port;
    proxy_set_header X-Forwarded-Prefix /damast/testing/;
    proxy_set_header X-Forwarded-Proto $scheme;
  }

  error_page 502 /502.html;
  location = /502.html {
    root /var/www/html;
  }
}

server {
  listen 80 default_server;
  listen [::]:80 default_server;

  return 301 https://$host$request_uri;
}