mail.univers.su_https

server {
    listen 80;
    server_name mail.univers.su;
    return 301 https://$server_name$request_uri; # enforce https
}

server {
    listen 443 ssl;
    server_name mail.univers.su;

    access_log /var/log/nginx/mail.univers.su_https_access.log;
    error_log /var/log/nginx/mail.univers.su_https_error.log;

    include _ssl_pfs.conf;
    ssl_dhparam /etc/ssl/univers.su/dhparam2048.pem;

    location / {
        proxy_pass http://192.168.4.20;
        proxy_buffering off;
        proxy_next_upstream error timeout invalid_header http_500 http_502 http_503;

        # Set headers
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

        # Most PHP, Python, Rails, Java App can use this header
        proxy_set_header X-Forwarded-Proto https;
        proxy_redirect off;
    }
}