feat: nginx certificate setups

certs/ssl_certificate.crt

+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

certs/ssl_certificate_key.key

+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

nginx/conf.d/nginx.conf

+server {
+    listen 80;
+    listen [::]:80;
+    server_name dev.kotahi.com;
+    return 301 https://$host$request_uri;
+}
+
+server {
+    listen 443 ssl;
+    server_name dev.kotahi.com;
+
+    ssl_certificate certs/ssl_certificate.crt;
+    ssl_certificate_key certs/ssl_certificate_key.key;
+    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
+    ssl_prefer_server_ciphers on;
+    ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH";
+    ssl_ecdh_curve secp384r1;
+    ssl_session_cache shared:SSL:10m;
+    ssl_session_tickets off;
+    resolver 8.8.8.8 8.8.4.4 valid=300s;
+    resolver_timeout 5s;
+
+    #charset koi8-r;
+
+    #access_log logs/host.access.log main;
+
+    location / {
+        proxy_set_header X-Forwarded-For $remote_addr;
+        proxy_set_header Host $http_host;
+        proxy_pass http://localhost:4000;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header X-Forwarded-Proto $scheme;
+        add_header 'Cache-Control' 'no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0';
+        proxy_set_header Host $host;
+        proxy_cache_bypass 1;
+        proxy_no_cache 1;
+        expires off;
+    }
+
+    location /api {
+        proxy_set_header X-Forwarded-For $remote_addr;
+        proxy_set_header Host $http_host;
+        proxy_pass http://localhost:3000;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header X-Forwarded-Proto $scheme;
+        add_header 'Cache-Control' 'no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0';
+        proxy_set_header Host $host;
+        proxy_cache_bypass 1;
+        proxy_no_cache 1;
+        expires off;
+    }
+
+    #error_page 404 /404.html;
+    
+    # redirect server error pages to the static page /50x.html
+    #
+    error_page 500 502 503 504 /50x.html;
+    location = /50x.html {
+        root html;
+    }
+}
\ No newline at end of file