gistfile1.txt

#nginx config

upstream forwardedserver {
        server 127.0.0.1:3030;
}

upstream forwardedsockets {
        server 127.0.0.1:35729;
}

server {
        server_name <your.domain.name>;
        root /var/www/html;
        try_files $uri @dev;

        location @dev {
                proxy_set_header   X-Forwarded-For $remote_addr;
                proxy_set_header   Host $http_host;
                proxy_pass         http://forwardedserver;
        }
        etag off;
        gzip on;
        gzip_types text/plain application/xml text/css application/javascript;


    listen <server.ip>:443 ssl http2; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/<your.domain.name>/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/<your.domain.name>/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}

server {
        server_name <your.domain.name>;
        root /var/www/html;
        try_files $uri @dev2;

        location @dev2 {
                proxy_set_header   X-Forwarded-For $remote_addr;
                proxy_set_header   Host $http_host;
                proxy_http_version 1.1;
                proxy_set_header Upgrade $http_upgrade;
                proxy_set_header Connection "Upgrade";
                proxy_pass         http://forwardedsockets;
        }
        etag off;


    listen <server.ip>:35729 ssl http2; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/d<your.domain.name>/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/<your.domain.name>/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}

#ssh command
ssh -R3030:localhost:9000 -R35729:localhost:35729 scott@<your.domain.name>