gistfile1.txt

server {
  listen 80 default;
  server_name _;
  client_max_body_size 0;
  rewrite ^ https://$http_host$request_uri? permanent;
}

server {
    listen 443 default ssl;
    server_name *.example.com;

    ssl_certificate /etc/nginx/ssl/wildcard.example.com.crt;
    ssl_certificate_key /etc/nginx/ssl/wildcard.example.com.key;
    ssl_session_cache shared:SSL:10m;
    ssl_session_timeout 5m;

      location / {
    proxy_pass http://localhost:81;
    proxy_redirect          off;
    proxy_set_header        Host            $host;
    proxy_set_header        X-Real-IP       $remote_addr;
    proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_http_version      1.1;
    client_max_body_size    0;
    client_body_buffer_size 128k;
    proxy_connect_timeout   10;
    proxy_send_timeout      14400;
    proxy_read_timeout      14400;
    proxy_buffers           32 4k;
  }
}

server {
    listen 443 ssl;
    server_name *.example2.com;

    ssl_certificate /etc/nginx/ssl/wildcard.example2.com.crt;
    ssl_certificate_key /etc/nginx/ssl/wildcard.example2.com.key;
    ssl_session_cache shared:SSL:10m;
    ssl_session_timeout 5m;

      location / {
    proxy_pass http://localhost:81;
    proxy_redirect          off;
    proxy_set_header        Host            $host;
    proxy_set_header        X-Real-IP       $remote_addr;
    proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_http_version      1.1;
    client_max_body_size    0;
    client_body_buffer_size 128k;
    proxy_connect_timeout   10;
    proxy_send_timeout      14400;
    proxy_read_timeout      14400;
    proxy_buffers           32 4k;
  }
}

## The following hostnames are "whitelisted" to not force https
server {
  listen 80;
  server_name .example2.com .example3.com;
  location / {
    proxy_pass http://localhost:81;
    proxy_redirect          off;
    proxy_set_header        Host            $host;
    proxy_set_header        X-Real-IP       $remote_addr;
    proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_http_version      1.1;
    client_max_body_size    0;
    client_body_buffer_size 128k;
    proxy_connect_timeout   10;
    proxy_send_timeout      14400;
    proxy_read_timeout      14400;
    proxy_buffers           32 4k;
  }
}