somewhere.nginx.conf

upstream some.where {
  server unix:/home/somewhere/deploy/somewhere/tmp/puma.sock;
}


server {
  listen 80;
  server_name some.where www.some.where;

  location / {
    return 301 https://some.where$request_uri;
  }
}

server {

  listen 443 ssl;
  server_name some.where www.some.where;

  ssl on;
  ssl_certificate /etc/nginx/ssl_certs/startssl/some.where.ssl.chained.crt;
  ssl_certificate_key /etc/nginx/ssl_certs/startssl/some.where.ssl.key;

  location / {
    #all requests are sent to the UNIX socket
    proxy_pass  http://some.where;
    proxy_redirect     off;

    proxy_set_header   Host             $host;
    proxy_set_header   X-Real-IP        $remote_addr;
    proxy_set_header   X-Forwarded-For  $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto https;

  }

  location ~ ^/(assets|uploads)/ {
    root /home/somewhere/deploy/somewhere/public;

    expires max;
    add_header Cache-Control public;

    add_header ETag "";
    break;
  }

}