Nginx HTTPS for CouchDB

server {
  	listen 443 ssl;
  	server_name softwaredesign.ml;

  	root /usr/share/nginx/html;

  	ssl on;
  	ssl_certificate /etc/letsencrypt/live/pageaddress.ml/fullchain.pem;
  	ssl_certificate_key /etc/letsencrypt/live/pageaddress.ml/privkey.pem;
  	ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
  	ssl_prefer_server_ciphers on;
  	ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
  	ssl_session_cache shared:SSL:1m;
	ssl_stapling on;
    ssl_stapling_verify on;
	
	add_header X-Frame-Options DENY;
    add_header X-Content-Type-Options nosniff;
    add_header X-Clacks-Overhead "GNU Terry Pratchett";

  	location / {
		# rewrite /data/(.*) /$1 break;
    	proxy_pass http://0.0.0.0:5984;
    	proxy_redirect off;
    	proxy_set_header Host $host;
		proxy_set_header X-Forwarded-Ssl on;
    	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  	}

	# location ~ ^/data/(.*)/_changes {
	# 	proxy_pass http://localhost:5984;
	# 	proxy_redirect off;
	# 	proxy_buffering off;
	# 	proxy_set_header Host $host;
	# 	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
	# }

  	location ~ /.well-known {
    	allow all;
  	}
}