https-websocket-proxy.conf

map $http_upgrade $connection_upgrade {
    default upgrade;
    '' close;
}

upstream app {
  server 127.0.0.1:3838 fail_timeout=0;
}

server {
  listen 80 default;
  server_name yeom.twonil.com yeom-vpn.twonil.com 127.0.0.1;
  rewrite ^ https://$server_name$request_uri? permanent;
}

server {
  listen 443 default ssl;
  server_name yeom.twonil.com yeom-vpn.twonil.com 127.0.0.1;

  ssl_certificate           /etc/ssl/certs/twonil-wildcard-nginx.crt;
  ssl_certificate_key       /etc/ssl/private/twonil-wildcard.key;

  ssl_session_timeout  5m;
  ssl_protocols  SSLv3 TLSv1;
  ssl_ciphers HIGH:!ADH:!MD5;
  ssl_prefer_server_ciphers on;

  location / {
    proxy_set_header Host $http_host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-Proto https;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

    add_header Pragma "no-cache";

    proxy_pass http://app;
    proxy_redirect http://app $scheme://$host/;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection $connection_upgrade;
    proxy_read_timeout 20d;
  }
}