nginx phoenix app

myapp.conf

map $http_upgrade $connection_upgrade {
  default upgrade;
  '' close;
}

upstream myapp {
  server localhost:4000;
}

server {
  listen 80 default_server;
  listen [::]:80 default_server;

  server_name myapp.com;

  location /.well-known {
    alias /etc/letsencrypt/webroots/myapp.com/.well-known;
  }

  location / {
    return 301 https://$server_name$request_uri;
  }
}

server {
  listen 443 ssl http2 default_server;
  listen [::]:443 ssl http2 default_server;

  server_name myapp.com;

  root /var/www/myapp/production/public;

  ssl_certificate         /etc/ssl/myapp.com/certbot/fullchain.pem;
  ssl_certificate_key     /etc/ssl/myapp.com/certbot/privkey.pem;
  ssl_trusted_certificate /etc/ssl/myapp.com/certbot/chain.pem;

  access_log /var/log/nginx/my-app-access.log combined;
  error_log  /var/log/nginx/my-app-error.log;

  include conf.d/server/canonical-redirect.conf;
  include conf.d/server/cleaner-logs.conf;
  include conf.d/server/font-cors.conf;
  include conf.d/server/security.conf;
  include conf.d/server/ssl.conf;
  include conf.d/server/xss-protection.conf;

  index index.html;

  location / {
    proxy_set_header X-Real-IP       $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header Host            $http_host;
    proxy_set_header Upgrade         $http_upgrade;
    proxy_set_header Connection      $connection_upgrade;
    proxy_http_version               1.1;

    proxy_redirect off;
    proxy_pass http://myapp;
  }
}