nginx.conf

user  nginx;

worker_processes  1;

error_log  /var/log/nginx/error.log warn;

pid        /var/run/nginx.pid;

events {
  worker_connections  1024;
}

http {
  include                 /etc/nginx/mime.types;
  default_type            application/octet-stream;
  log_format              main  '$remote_addr - $remote_user [$time_local] "$request" '
                                '$status $body_bytes_sent "$http_referer" '
                                '"$http_user_agent" "$http_x_forwarded_for"';
  access_log              /var/log/nginx/access.log  main;
  sendfile                on;
  keepalive_timeout       65;

  ssl_session_cache       shared:SSL:10m;
  ssl_session_timeout     10m;

  map $sent_http_content_type $expires {
    default               14d;
    text/html             -1;
  }

  map $http_host $robots {
    default "";
    # if $http_host contains the word staging
    "~*rcpt-stg" "noindex";
    "~*kibana" "noindex";
    "~*elasticsearch" "noindex";
  }

  upstream api {
    server backend;
  }

  upstream articles {
    server articles:3000;
  }

  server {
    gzip on;
    gzip_min_length 1000;
    gzip_types
      image/svg+xml
      text/plain
      text/css
      text/xml
      text/javascript
      application/x-javascript
      application/xml
      application/javascript;
    gzip_disable "MSIE [1-6]\.";

    listen              80;
    listen              443 ssl http2;
    server_name         recipeit.pl www.recipeit.pl;
    keepalive_timeout   70;

    ssl_certificate /etc/letsencrypt/live/recipeit.pl/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/recipeit.pl/privkey.pem;
    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_prefer_server_ciphers off;
    ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;

    add_header X-Robots-Tag $robots;

    if ($scheme != "https") {
      return 301 https://$host$request_uri;
    }

    location /api/ {
      proxy_pass http://api/;
    }

    location /artykuly/ {
      proxy_pass http://articles/artykuly/;
    }

    location /static/ {
      root          /app/dist;
      expires       $expires;
      gzip_static   on;
      try_files     $uri $uri/ =404;
    }

    location /og/ {
      root          /app/dist;
      expires       24h;
      gzip_static   on;
      try_files     $uri $uri/ =404;
    }

    location ~ (\.js\.map) {
      return 403;
    }

    location / {
      root          /app/dist;
      index         index.html;
      expires       $expires;
      gzip_static   on;
      try_files     $uri $uri/ /index.html;
    }

    error_page      500 502 503 504  /50x.html;

    location = /50x.html {
      root   /usr/share/nginx/html;
    }
  }

  server {
    listen 80;
    listen 443;
    server_name 141.94.31.41;

    add_header X-Robots-Tag "noindex";

    return 302 https://recipeit.pl$request_uri;
  }

  server {
    listen 80;
    listen 443;
    server_name 51.83.186.27;

    add_header X-Robots-Tag "noindex";

    return 302 https://rcpt-stg.recipeit.pl$request_uri;
  }

  server {
    listen 443;
    server_name kibana.recipeit.pl;

    location / {
      proxy_pass https://kibana.recipeit.pl:5601/;
    }
  }
  server {
    listen 443;
    server_name elastic.recipeit.pl;

    location / {
      proxy_pass https://elastic.recipeit.pl:9200/;
    }
  }
}